PatchTheCVE: silverpeas

CVE-2025-45055: Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module

Wed, 17 Jun 2026 09:25:22 +0000

MEDIUM 5.4: Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attackers

CVE-2024-56923: Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality

Wed, 17 Jun 2026 08:13:05 +0000

MEDIUM 5.4: Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6.4.1 allows a remote attacker to execute arbitrary JavaScript code. This is achieved by injecting a malicious payload into the Name field of a subscription. The

CVE-2024-48814: SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via t

Wed, 17 Jun 2026 07:58:50 +0000

HIGH 7.5: SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function

CVE-2024-42850: An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password c

Sun, 05 Jul 2026 01:20:21 +0000

CRITICAL 9.8: An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

CVE-2024-42849: An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the passwor

Sun, 05 Jul 2026 01:20:20 +0000

MEDIUM 6.5: An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function.

CVE-2024-39031: In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar

Wed, 17 Jun 2026 07:41:24 +0000

MEDIUM 5.4: In Silverpeas Core <= 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when cr