CVE-2026-55790

creationtimestamp| type| source ---|---|--- 2026-07-02 00:04:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmqagvqrn2p 2026-07-02 15:35:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoeaxpefn2b 2026-07-06 22:30:04+00:00| seen|...

CVE-2026-55790

Summary of CVE-2026-55790 (Craft CMS) : This is a DOM-based cross-site scripting flaw in Craft CMS. Versions affected are 5.0.0-RC1–5.9.22 and 4.0.0-RC1–4.17.15. An attacker with only a GitHub account can insert a JavaScript payload into a craftcms/cms issue title. When a Craft admin uses the Cra...