Skip to content
OpenAdvisories

Vendor

LaraDashboard

18 known vulnerabilities.

Products

LaraDashboard 18
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-90931 Public exploit

    LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload

    LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators o…

    LaraDashboard LaraDashboard