CVE-2026-61696 | Forem Feedback Messages _feedback_message.html.erb raw Message cross site scripting

August 18, 2026 Yanac

A vulnerability marked as problematic has been reported in Forem. Affected is the function raw of the file app/views/admin/feedback_messages/_feedback_message.html.erb of the component Feedback Messages. This manipulation of the argument Message causes cross site scripting.

This vulnerability is registered as CVE-2026-61696. Remote exploitation of the attack is possible. No exploit is available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More