Cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*

A reflected cross-site scripting (XSS) vulnerability in the Wagtail admin interface (CVE-2026-54263) allows an authenticated editor to execute arbitrary JavaScript in the context of a higher-privileged administrator.