https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T02:59:53.543960+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-84793 fkie_cve-2026-84793 2026-10-07T02:59:53.545564+00:00

Craft CMS versions from 5.0.0-RC1 before 5.10.11 contain a stored cross-site scripting vulnerability in the site name field that fails to sanitize input. Administrators can inject arbitrary JavaScript payloads in the site name that execute when other users view the control panel settings pages.

 https://vulnerability.circl.lu/vuln/ghsa-wf9j-59pf-vfvj GHSA-wf9j-59pf-vfvj 2026-10-07T02:59:53.545636+00:00

Craft CMS versions from 5.0.0-RC1 before 5.10.11 contain a stored cross-site scripting vulnerability in the site name field that fails to sanitize input. Administrators can inject arbitrary JavaScript payloads in the site name that execute when other users view the control panel settings pages.