Product

Strapi (4.x-4.26.2)

1 brief RSS

Stored Cross-Site Scripting Vulnerability in Strapi Content Manager

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 are vulnerable to stored XSS via the WYSIWYG preview component, allowing an authenticated Author to trigger script execution in high-privilege sessions.

Strapi +1

2t 1c updated 5d ago