Skip to content
OpenAdvisories

Vendor

plank

6 known vulnerabilities.

Products

laravel-mediable 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-49971

    Laravel-Mediable < 7.0.0 Stored XSS via SVG File Upload

    Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymous users to execute arbitrary JavaScript by uploading unsanitized SVG files containing embedded scripts in onload event handlers, script tag…

    plank laravel-mediable