CVE-2025-26159
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field.
- Update to 11.11.0
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for nasirkhan/laravel-starter in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field.
Check your installed stack and versions against the current vulnerability feeds.