UpHeron
All vulnerabilities

Servers and applications

CVE-2026-91110

XSS using control bytes

Severity
Medium 6.4
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
6.2.13
Also known as
GHSA-m5w3-5gq7-2crg
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Silverstripe CMSServers and applications · github:silverstripe/silverstripe-framework
  • Every version before 6.2.13

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-91110
  • GitHub Advisory Database https://github.com/advisories/GHSA-m5w3-5gq7-2crg
  • github.com https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-m5w3-5gq7-2crg