Stored XSS via Structure Entry Title in Craft CMS CVE-2026-55783

github.com 2026-07-02查看中文 →

Security AdvisoryCVE-2026-55783MediumCraft CMS

Affected:

craftcms/cms >= 5.0.0-RC1, < 5.9.22

Fixed in:

5.9.53

Referenced CVEs: CVE-2026-55793

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

SourceCoder 1.0 Privilege Escalation via Missing Authorization (CVE-2026-) 2026-08-23 Hospital Management System V1.0 SQL Injection Vulnerability in viewserviceype.php 2026-08-23 Hardcoded Default JWT Secret Authentication Bypass in vas3k/TaxHacker 2026-08-23 SSRF in vas3k/TaxHacker via IMAP Config 2026-08-23 Stored XSS in Stock Management System v1.0 via getOrderReport.php with POC 2026-08-23

Offline Archive

Offline screenshot & PDF are Pro-exclusive