CVE-2026-32612

Statmatic (Laravel/Git-based CMS) contains a stored XSS in the control panel color mode preference prior to version 6.6.2. An authenticated user with CP access could inject malicious JavaScript that would run when a higher-privileged user impersonated their account. The issue is resolved in versi...