Skip to content
Threat Feed
Subscribe

Product

Appsmith (< 1.96)

1 brief RSS
critical advisory

Appsmith: Stored XSS and Privilege Escalation (CVE-2026-30862)

Appsmith versions 1.95 and earlier are vulnerable to a stored XSS in the Table Widget component, allowing an authenticated attacker to perform administrative account takeover via session-based privilege escalation.

Appsmith web-application xss privilege-escalation
2t 1c