https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 21:56:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-270472 EUVD-2026-270472 https://cve.radiocsirt.org/vuln/euvd-2026-270472 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27126 <p>Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a stored Cross-site Scripting (XSS) vulnerability exists in the `editableTable.twig` component when using the `html` column type. The application fails to sanitize the input, allowing an attacker to execute arbitrary JavaScript when another user views a page with the malicious table field. In order to exploit the vulnerability, an attacker must have an administrator account, and `allowAdminChanges` must be enabled in production, which is against Craft&#39;s security recommendations. Versions 4.16.19 and 5.8.23 patch the issue.</p> <p>Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a stored Cross-site Scripting (XSS) vulnerability exists in the `editableTable.twig` component when using the `html` column type. The application fails to sanitize the input, allowing an attacker to execute arbitrary JavaScript when another user views a page with the malicious table field. In order to exploit the vulnerability, an attacker must have an administrator account, and `allowAdminChanges` must be enabled in production, which is against Craft&#39;s security recommendations. Versions 4.16.19 and 5.8.23 patch the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-27126 https://cve.radiocsirt.org/vuln/ghsa-3jh3-prx3-w6wc <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>A stored Cross-site Scripting (XSS) vulnerability exists in the `editableTable.twig` component when using the `html` column type. The application fails to sanitize the input, allowing an attacker to execute arbitrary JavaScript when another user views a page with the malicious table field.</p> <p>## Prerequisites * An administrator account * `allowAdminChanges` must be enabled in production, which is [against our security recommendations](https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production).</p> <p>## Steps to Reproduce 1. Navigate to **Settings** → **Fields** and create a new field with Type: **Table** 1. Add a **Column Heading** and set **Column Type** to `Single-line text` - **Note:** The vulnerable **Column Type** is `html`, but it&#39;s not available in the UI dropdown. 1. In **Default Values** section, add a row with the following payload: ```html &lt;img src=x onerror=&#34;alert(&#39;XSS&#39;)&#34;&gt; ``` 1. Enable `Static Rows` 1. Intercept the **Save Field** request using a proxy tool (e.g., Burp Suite) or use `cURL` directly 1. Modify the request body and change the `types[craft-fields-Table][columns][col3][type]` parameter from `singleline` to `html` 1. Forward the request to save the field 1. Use the field in any object (e.g. user profile fields) → then visit the any user&#39;s profile 1. Notice the XSS execution 1. The XSS will also trigger when an administrator attempts to edit this field, as the malicious payload is executed within the field…</p> <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>A stored Cross-site Scripting (XSS) vulnerability exists in the `editableTable.twig` component when using the `html` column type. The application fails to sanitize the input, allowing an attacker to execute arbitrary JavaScript when another user views a page with the malicious table field.</p> <p>## Prerequisites * An administrator account * `allowAdminChanges` must be enabled in production, which is [against our security recommendations](https://craftcms.com/knowledge-base/securing-craft#set-allowAdminChanges-to-false-in-production).</p> <p>## Steps to Reproduce 1. Navigate to **Settings** → **Fields** and create a new field with Type: **Table** 1. Add a **Column Heading** and set **Column Type** to `Single-line text` - **Note:** The vulnerable **Column Type** is `html`, but it&#39;s not available in the UI dropdown. 1. In **Default Values** section, add a row with the following payload: ```html &lt;img src=x onerror=&#34;alert(&#39;XSS&#39;)&#34;&gt; ``` 1. Enable `Static Rows` 1. Intercept the **Save Field** request using a proxy tool (e.g., Burp Suite) or use `cURL` directly 1. Modify the request body and change the `types[craft-fields-Table][columns][col3][type]` parameter from `singleline` to `html` 1. Forward the request to save the field 1. Use the field in any object (e.g. user profile fields) → then visit the any user&#39;s profile 1. Notice the XSS execution 1. The XSS will also trigger when an administrator attempts to edit this field, as the malicious payload is executed within the field…</p> https://cve.radiocsirt.org/vuln/ghsa-3jh3-prx3-w6wc