CVE-2025-46041

Anchor CMS v0.12.7 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability within the description field (or markdown field in some reports) of the /admin/pages/add page creation interface. The root cause is located in the file anchor/routes/pages.php, where the application fails to pro...