Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-26159

Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field.

VectorNETWORK

PublishedApr 22, 2025, 20:15

Published Bycve@mitre.org

Base Score

Score6.1

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

nasirkhan/laravel-starter(Packagist)011.11.0N/A

References

https://github.com/nasirkhan/laravel-starter
https://godbadtry.github.io/posts/CVE-2025-26159/

Weakness Type

CWE-79

CVSS Metrics

Base Score

6.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK