Security Advisory

CVE-2026-25491

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-09 19:25:29

Last updated 2026-02-10 16:00:46

Assigner GitHub_M

CVSS score 1.9

State PUBLISHED

Description

Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type names. The name is not sanitized when displayed in the Entry Types list. This vulnerability is fixed in 5.8.22.

← Browse all CVEs View on cve.org ↗