Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/25 7:11 p.m.9 views

Craft CMS has Stored XSS in Table Field in its "Row Heading" Column Type

A stored Cross-site Scripting XSS vulnerability exists in the editableTable.twig component when using the Row Heading column type. The application fails to sanitize input within row headings, allowing an attacker to execute arbitrary JavaScript when another user views a page with the malicious...

5.8AI score
SaveExploits0References6Affected Software1
Rows per page
Query Builder