high
Strapi: Cross-site scripting possible
CERT-Bund (BSI) reports one vulnerability in Strapi with severity high. The stated impact is cross-site scripting. The full description, affected versions and recommended action are available from CERT-Bund (BSI).
- Attack vector
- over the network
- Access needed
- yes, an account is needed
What this means for you
Attackers can run code in your users' browsers. This mainly affects publicly reachable portals and login forms, where sessions can be taken over.
Original source
Insights
More articles
Weekly situation, week 37: 117 advisories, 24 critical
Between 6 Sep and 13 Sep 2026 our sources recorded 117 advisories: 24 critical, 93 high.
Weekly situation, week 36: 55 advisories, 12 critical
Between 30 Aug and 6 Sep 2026 our sources recorded 55 advisories: 12 critical, 43 high.
Weekly situation, week 35: 75 advisories, 21 critical
Between 23 Aug and 30 Aug 2026 our sources recorded 75 advisories: 21 critical, 54 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.