Skip to content
Threat Feed
Subscribe

Tag

Appsmith

2 briefs RSS
critical advisory

Appsmith: Stored XSS and Privilege Escalation (CVE-2026-30862)

Appsmith versions 1.95 and earlier are vulnerable to a stored XSS in the Table Widget component, allowing an authenticated attacker to perform administrative account takeover via session-based privilege escalation.

Appsmith web-application xss privilege-escalation
2t 1c
high advisory

Appsmith SQL Injection Vulnerability in FilterDataService

A SQL injection vulnerability exists in Appsmith's FilterDataServiceCE.java in versions 1.98 and earlier where the dropTable method constructs a SQL DROP TABLE statement using string concatenation with the table name, allowing arbitrary SQL command execution, leading to potential data loss, exfiltration, or modification.

interfaces sql-injection data-loss appsmith
2r 1t