Beveiligingsadvies

CVE-2026-3327

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-27 14:09:38

Laatst bijgewerkt 2026-02-27 18:44:26

Toegewezen door Intigriti

CVSS-score 4.8

Status PUBLISHED

Beschrijving

Authenticated Iframe Injection in Dato CMS Web Previews plugin. This vulnerability permits a malicious authenticated user to circumvent the restriction enforced on the configured frontend URL, enabling the loading of arbitrary external resources or origins. This issue affects Web Previews < v1.0.31.

← Alle CVE's bekijken Bekijk op cve.org ↗