SilverStripe Versioned up to 3.2.0 RestoreAction src/RestoreAction.php getRestoreMessage cross site scripting

Summaryinfo

A vulnerability categorized as problematic has been discovered in SilverStripe Versioned up to 3.2.0. The impacted element is the function RestoreAction::getRestoreMessage of the file src/RestoreAction.php of the component RestoreAction. Executing a manipulation can lead to cross site scripting. The identification of this vulnerability is CVE-2026-55779. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability classified as problematic was found in SilverStripe Versioned up to 3.2.0. This vulnerability affects the function RestoreAction::getRestoreMessage of the file src/RestoreAction.php of the component RestoreAction. The manipulation with an unknown input leads to a cross site scripting vulnerability. The CWE definition for the vulnerability is CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. As an impact it is known to affect integrity. CVE summarizes:

Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage() in src/RestoreAction.php builds ArchiveAdmin restore notifications rendered as CAST_HTML and inserts $restoredItem->Title, $restoredItem->URLSegment, $restoredItem->CMSEditLink(), and $changedProperty['value'] without applying Convert::raw2xml(). When an administrator restores an archived page containing a crafted title or URL segment, the generated restoration message can execute stored JavaScript in the administrator's browser, compromising the confidentiality and integrity of the CMS session. This issue is fixed in version 3.2.1.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-55779 since 06/17/2026. The exploitation appears to be easy. The attack can be initiated remotely. Additional levels of successful authentication are needed for exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1059.007.

By approaching the search of inurl:src/RestoreAction.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 3.2.1 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Content Management System

Vendor

• SilverStripe

Name

• Versioned

Version

• 3.0
• 3.1
• 3.2.0

License

• open-source

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion