CVE-2026-110239 in Rapyd Admin
Сводка
по MITRE • 13.10.2026
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes when administrators open the record's form.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.