CVE-2026-85085 | Canva App up to 2.375.x WebView cross site scripting

September 4, 2026 Yanac

A vulnerability was found in Canva App up to 2.375.x and classified as problematic. Affected by this issue is some unknown functionality of the component WebView. Such manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-85085. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More