CVE-2026-55790

creationtimestamp| type| source ---|---|--- 2026-07-02 00:04:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmqagvqrn2p 2026-07-02 15:35:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoeaxpefn2b 2026-07-06 22:30:04+00:00| seen|...

CVE-2026-55790

Summary of CVE-2026-55790 (Craft CMS) : This is a DOM-based cross-site scripting flaw in Craft CMS. Versions affected are 5.0.0-RC1–5.9.22 and 4.0.0-RC1–4.17.15. An attacker with only a GitHub account can insert a JavaScript payload into a craftcms/cms issue title. When a Craft admin uses the Cra...

CVE-2026-55790 Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget

Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types...