Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: LaraDashboard 1.4.9 Clear all filters
TI-2026-83855 CVE-2026-120488 · GHSA-5g7w-8vm6-6hg2

Stored cross-site scripting in LaraDashboard LaraBuilder blocks

Priority LOW 23

LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with post.create or post.edit permission to inject scripts via unsanitized LaraBuilder design_json block con…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00218 Published 2026-11-02 Fixed in 1.4.9 CWE-79
TI-2026-83842 CVE-2026-120450 · GHSA-g452-mgph-pcc8

LaraDashboard Improper Authorization in MCP send-email Tool

Priority MEDIUM 57

LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerability that allows authenticated users with read-only email_template.view permission to send arbitrary emails via the MCP send-email tool.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00238 Published 2026-11-02 Fixed in 1.4.9 CWE-863