CVE-2026-10850— Plane 1.3.1 - Stored XSS in intake issue description_html
Possible ATT&CK Techniques 1AI
T1059.007 · JavaScriptGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-10850
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Plane 1.3.1 - Stored XSS in intake issue description_html
Source: NVD (National Vulnerability Database)
Vulnerability Description
Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the description_html field when creating an intake work item through the API v1 intake endpoint.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
plane 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Plane是Plane公司开源的一个开源、自托管的项目规划工具。 Plane CE 1.3.1版本存在跨站脚本漏洞，该漏洞源于description_html字段提交任意HTML/JS，可能导致跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-10850
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10850
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-10850 (1)
Vendor Pages for CVE-2026-10850 (1)
IV. Related Vulnerabilities
Same product: Plane
- CVE-2026-46558
Plane: Cross-workspace asset authorization bypass lets any a - CVE-2026-40102
Plane: ORM Field Reference Injection via `segment` Parameter - CVE-2026-39843
Plane has a Server-Side Request Forgery (SSRF) in Favicon Fe - CVE-2026-27949
Plane Exposes User Email (PII and part of credential) in GET - CVE-2026-39374
Plane IDOR: Cross-Project Issue Date Modification via Bulk U
Same weakness: CWE-79
- CVE-2026-61876
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting - CVE-2026-61875
luci-app-upnp Stored XSS via UPnP Port Mapping Description - CVE-2026-15493
Akpali9 Attendance-Management-System absent.php cross site s - CVE-2026-15492
igweze wizgrade studentConductManager.php cross site scripti - CVE-2026-15010
bbp style pack <= 6.4.5 - Authenticated (Subscriber+) Stored
V. Comments for CVE-2026-10850
No comments yet