Vulnerabilities

TI-2026-30836 CVE-2026-42556

Postiz stored XSS in public preview page

MEDIUM 40

Postiz is an AI social media scheduling tool.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00258 Published 2026-05-08 Fixed in 2.21.7 CWE-79

TI-2026-30607 CVE-2026-42298

MEDIUM 49

Postiz is an AI social media scheduling tool.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00504 Published 2026-05-08 No fix listed CWE-94

TI-2026-29238 CVE-2026-40487

HIGH 74

Postiz is an AI social media scheduling tool.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00224 Published 2026-04-18 Fixed in 2.21.6 CWE-345

TI-2026-28982 CVE-2026-40168

HIGH 75

Postiz is an AI social media scheduling tool.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00386 Published 2026-04-10 Fixed in 2.21.5 CWE-918

TI-2026-26837 CVE-2026-34590

MEDIUM 58

Postiz is an AI social media scheduling tool.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00234 Published 2026-04-02 Fixed in 2.21.4 CWE-918

TI-2026-26825 CVE-2026-34577

HIGH 76

Postiz is an AI social media scheduling tool.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00482 Published 2026-04-02 Fixed in 2.21.3 CWE-918

TI-2026-26824 CVE-2026-34576

HIGH 69

Postiz is an AI social media scheduling tool.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00272 Published 2026-04-02 Fixed in 2.21.3 CWE-918