Skip to content
Threat Feed
Subscribe

Product

Wagtail (7.3.x, 7.4.x)

1 brief RSS
high advisory

Reflected Cross-Site Scripting in Wagtail Dynamic Image URL Generator

A reflected cross-site scripting (XSS) vulnerability in the Wagtail admin interface (CVE-2026-54263) allows an authenticated editor to execute arbitrary JavaScript in the context of a higher-privileged administrator.

Wagtail
1t 1c