CVE-2026-25491
LOW SEVERITYVulnerability Description
Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type names. The name is not sanitized when displayed in the Entry Types list. This vulnerability is fixed in 5.8.22.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-79
Source
NVD
Vendor
craftcms
Product
cms
Discussion (0)
Add Comment
No comments yet. Be the first!