Skip to content
OpenAdvisories

Vendor

gitroomhq

20 known vulnerabilities.

Products

postiz-app 20
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.9
    CVE-2026-40487 Public exploit

    Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS

    Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload validation bypass allows any authenticated user to upload arbitrary HTML, SVG, or other executable file types to the server by spoofing the `Content-Type` header. The uploade…

    gitroomhq postiz-app