CPE

Cpe:2.3:a:strapi:strapi::::::::

1 brief RSS

Stored Cross-Site Scripting Vulnerability in Strapi Content Manager

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 are vulnerable to stored XSS via the WYSIWYG preview component, allowing an authenticated Author to trigger script execution in high-privilege sessions.

Strapi +1

2t 1c updated 5d ago

Cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*

Stored Cross-Site Scripting Vulnerability in Strapi Content Manager

Cpe:2.3:a:strapi:strapi::::::::