Threats Tagged 'ghsa-2rp4-x2j7-qmcc'
View all threats tagged with 'ghsa-2rp4-x2j7-qmcc'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-2rp4-x2j7-qmcc'
Click on any threat for detailed analysis and mitigation recommendations
Craft CMS: Stored XSS in the control panel via unescaped draft name 0 A stored cross-site scripting (XSS) vulnerability exists in Craft CMS control panel where an element's draft name is rendered without proper HTML encoding. A low-privilege user who can create drafts can inject JavaScript payloads into the draft name, which execute in the browsers of higher-privileged users viewing the draft's chip or card. This allows the attacker to execute arbitrary JavaScript in the victim's authenticated control panel session, potentially taking over the control panel by performing admin-only actions via the victim's session. Join the discussion | GCVE Database | 08/06/2026, 21:33:15 UTC Added: 08/07/2026, 05:57:15 UTC |
Showing 1 to 1 of 1 result