CVE-2026-105128

LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirecturl parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template...

CVE-2026-105128 LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url

LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirecturl parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template...