CVE-2026-23643

CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl method has a cross-site-scripting vulnerability via query string parameter manipulation. This issue has been fixed in 5.2.12 and 5.3.1...

CVE-2026-23643

creationtimestamp| type| source ---|---|--- 2026-01-17 00:17:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcldls6jxt2v 2026-01-24 21:24:08+00:00| seen| https://gist.github.com/alon710/ff333395de66edee8237627d7d83890d 2026-01-24 22:29:10+00:00| seen|...