Skip to content
Threat Feed
Subscribe

Product

Strapi (4.x <= 4.26.2, 5.x < 5.48.1)

1 brief RSS
high advisory

Stored Cross-Site Scripting Vulnerability in Strapi Content Manager

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 are vulnerable to stored XSS via the WYSIWYG preview component, allowing an authenticated Author to trigger script execution in high-privilege sessions.

Strapi +1
2t 1c updated