CVE-2026-54049— Sakai Conversations has a Stored XSS Issue
Quick assessment
Affected
sakaiproject sakai
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Sakai 是一个协作与学习环境（CLE）。在版本 23.0 至 23.5 之前，以及版本 25.0 至 25.3 之前的版本中，Sakai 的“对话”（Conversations）工具在存储主题和帖子消息时未进行 HTML 净化处理，且前端使用 LitElement 的 指令渲染这些内容，从而导致存储型跨站脚本攻击（Stored XSS）。任何拥有访问权限且该站点启用了“对话”工具的用户，均可注入任意 HTML 和 JavaScript 代码，这些代码将在所有查看该主题或帖子的其他用户的浏览器中执行。此问题已在版
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-54049
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sakai Conversations has a Stored XSS Issue
Source: CVE Program / CVE List V5
Vulnerability Description
Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before 25.3, the Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using LitElement's unsafeHTML() directive, resulting in stored cross-site scripting (XSS). Any authenticated user with access to a site that has the Conversations tool enabled can inject arbitrary HTML and JavaScript that executes in the browsers of all other users who view that topic or post. This issue has been patched in versions 23.5, 25.3, and 26.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| sakaiproject | sakai | >= 23.0, < 23.5 | - |
|
II. Public POCs for CVE-2026-54049
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-54049
请登录查看更多情报信息。
Other References for CVE-2026-54049 (2)
-
https://github.com/sakaiproject/sakai/security/advisories/GHSA-w2x5-gv52-9ccv x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: sakai
-
CVE-2026-54050
Sakai: IDOR in Profile Image Deletion Allows Any Authenticat -
CVE-2026-33402
SAK-52311: Sakai site-manage group titles can contain XSS co -
CVE-2025-62710
Sakai kernel-impl: predictable PRNG used to generate server‑ -
CVE-2024-47876
Sakai: Kernel users created with type roleview can login as
Same vendor: sakaiproject
-
CVE-2026-54050
Sakai: IDOR in Profile Image Deletion Allows Any Authenticat -
CVE-2026-33402
SAK-52311: Sakai site-manage group titles can contain XSS co -
CVE-2025-62710
Sakai kernel-impl: predictable PRNG used to generate server‑ -
CVE-2024-47876
Sakai: Kernel users created with type roleview can login as
Same weakness: CWE-79
-
CVE-2026-71542
GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "ti -
CVE-2026-70650
GetSimple CMS: Authenticated Stored XSS in backup viewer (ba -
CVE-2026-55230
Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass -
CVE-2026-101890
Prime Mover < 2.2.1 Stored XSS via Package Metadata -
CVE-2026-56589
HCL BigFix Service Management is affected by multiple securi
V. Comments for CVE-2026-54049
No comments yet