CVE-2026-23525

creationtimestamp| type| source ---|---|--- 2026-01-19 00:38:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcqfova5dh2r 2026-01-19 17:29:02+00:00| seen| https://gist.github.com/Darkcrai86/c796400409392c97b106d21ddd7fcb75...

CVE-2026-23525 1panel App Store vulnerable to Cross-site Scripting

1Panel is an open-source, web-based control panel for Linux server management. A stored Cross-Site Scripting XSS vulnerability exists in the 1Panel App Store when viewing application details. Malicious scripts can execute in the context of the user’s browser, potentially compromising session data...