Summary
Filament: Disabled RichEditor field state can be used for XSS
References
Related vulnerabilities
All Supply chain →- HIGHGHSA-9CPJ-QC93-VW8V
Gitea: Stored XSS via glTF `extensionsRequired` in Gitea 3D File Viewer
- HIGHGHSA-V2QM-5WXJ-QHJ7
Open WebUI: Stored XSS to Account Takeover via Model Profile Images
- HIGHGHSA-V8QJ-HXV7-MGVV
Open WebUI: Stored XSS in Mermaid Markdown Preview
- MEDIUMGHSA-6MHR-74X2-98V9
NocoDB: Stored Cross-Site Scripting via Secure Attachment
- LOWGHSA-7V5M-PR3Q-6453
Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass
- LOWGHSA-M3Q2-P4FW-W38M
Cross-site scripting via <NoScript> slot content in Nuxt's head components