Skip to content

Craft CMS: Stored XSS in the control panel via unescaped draft name

Moderate severity GitHub Reviewed Published Jul 25, 2026 in craftcms/cms • Updated Aug 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts