https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:38:56.303660+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-273957 EUVD-2026-273957 2026-10-07T08:38:56.351676+00:00 EUVD-2026-273957 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28426 fkie_cve-2026-28426 2026-10-07T08:38:56.351717+00:00

Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 and 6.4.0, stored XSS vulnerability in svg and icon related components allow authenticated users with appropriate permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. This has been fixed in 5.73.11 and 6.4.0.

 https://cve.radiocsirt.org/vuln/ghsa-5vrj-wf7v-5wr7 GHSA-5vrj-wf7v-5wr7 — Statamic vulnerable to privilege escalation via stored cross-site scripting 2026-10-07T08:38:56.351750+00:00

Affected: Packagist: statamic/cms

### Impact Stored XSS vulnerability in svg and icon related components allow authenticated users with appropriate permissions to inject malicious JavaScript that executes when viewed by higher-privileged users.

### Patches This has been fixed in 5.73.11 and 6.4.0.