Hi everyone,

From time to time, people post to the SilverStripe forum to let us know about potential security holes. While we really appreciate this feedback, the problem with posting it to the forum is that it can give would-be hackers a nice searchable index of ways to attack older SilverStripe installations.

So, if you discover a security related issue, we definitely want to hear from you, but rather than posting it to the forum or the bug tracker, please email security@silverstripe.org. We can then assess the issue, and if necessary, release an update to SilverStripe or to the relevant module.

More information:http://doc.silverstripe.org/doku.php?id=contributing#reporting_security_issues

Thanks,
Sam