Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: laradashboard 1.3.0 Clear all filters
TI-2026-61796 CVE-2026-90932 · GHSA-fhqm-96v7-cxmf

LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

Priority HIGH 72

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0082 Published 2026-09-14 Fixed in 1.3.0 CWE-73
TI-2026-61795 CVE-2026-90931 · GHSA-qxqf-9qjp-qgw3

LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload

Priority MEDIUM 56

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-09-14 Fixed in 1.3.0 CWE-79