Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: tugcantopaloglu Clear all filters
TI-2026-47177 CVE-2026-66421 · GHSA-hc44-65x2-rvc2

OpenClaw Dashboard Stored XSS via lastMessage Session Field

Priority HIGH 71

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into ag…

CVSS 4.0HIGH 8.8 Network No auth User interaction EPSS 0.00633 Published 2026-07-30 No fix listed CWE-79
TI-2026-47175 CVE-2026-66418 · GHSA-jgjm-xq9g-p8xp

OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field

Priority HIGH 75

OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject arbitrary HTML and script payloads by submitting a crafted username in a failed login…

CVSS 4.0CRITICAL 9.3 Network No auth User interaction EPSS 0.00633 Published 2026-07-30 No fix listed CWE-79