CVE-2026-91922 | Steedos Platform up to 3.0.15-beta.47 Page Render /api/page/render schemaApi/data cross site scripting

September 15, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Steedos Platform up to 3.0.15-beta.47. The impacted element is an unknown function of the file /api/page/render of the component Page Render. This manipulation of the argument schemaApi/data causes cross site scripting.

This vulnerability is registered as CVE-2026-91922. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More