Skip to content
OpenAdvisories

Vendor

LaraDashboard

18 known vulnerabilities.

Products

LaraDashboard 18
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-90932 Public exploit

    LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

    LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService (e.g. BackupService::deleteBackup()) concatenate the user-supplied backup_file/filename value direct…

    LaraDashboard LaraDashboard
  • Medium 5.4
    CVE-2026-90931 Public exploit

    LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload

    LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators o…

    LaraDashboard LaraDashboard