Security Advisories - silverstripe/userforms - Packagist.org

silverstripe/userforms Security Advisories for 6.4.x-dev (3)

SS-2026-005 - XSS in required field label

PKSA-r5k2-9jwp-nhhh

Affected version: <7.1.4

Reported by:
FriendsOfPHP/security-advisories
CVE-2026-88992 - Userforms CSV export restricted file access

PKSA-w1yx-v3g8-nw8g CVE-2026-88992

Affected version: <7.1.4

Reported by:
FriendsOfPHP/security-advisories
CVE-2026-91111 - Uploaded XML XSS

PKSA-vyds-y4jb-5ff4 CVE-2026-91111

Affected version: <7.1.4

Reported by:
FriendsOfPHP/security-advisories