Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-25491
4.8
MEDIUMCVSS v3
Published
February 9, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type names. The name is not sanitized when displayed in the Entry Types list. This vulnerability is fixed in 5.8.22.
GitHub