Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/03 5:57 p.m.7 views

GHSA-P5CM-246W-84JM Wagtail Vulnerable to Cross-site Scripting in TableBlock class attributes

Impact A stored Cross-site Scripting XSS vulnerability exists on rendering TableBlock blocks within a StreamField. A user with access to create or edit pages containing TableBlock StreamField blocks is able to set specially-crafted class attributes on the block which run arbitrary JavaScript code...

6.1CVSS5.9AI score0.00419EPSS
SaveExploits0References11
Rows per page
Query Builder