https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T20:26:32.031401+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-270466 EUVD-2026-270466 2026-10-23T20:26:32.076358+00:00 EUVD-2026-270466 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27196 fkie_cve-2026-27196 2026-10-23T20:26:32.076405+00:00

Statmatic is a Laravel and Git powered content management system (CMS). Versions 5.73.8 and below in addition to 6.0.0-alpha.1 through 6.3.1 have a Stored XSS vulnerability in html fieldtypes which allows authenticated users with field management permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. This issue has been fixed in 6.3.2 and 5.73.9.

 https://cve.radiocsirt.org/vuln/ghsa-8r7r-f4gm-wcpq GHSA-8r7r-f4gm-wcpq — Statamic affected by privilege escalation via stored cross-site scripting 2026-10-23T20:26:32.076439+00:00

Affected: Packagist: statamic/cms

## Impact

Stored XSS vulnerability in `html` fieldtypes allow authenticated users with field management permissions to inject malicious JavaScript that executes when viewed by higher-privileged users.

## Patches

This has been fixed in 6.3.2 and 5.73.9.