CVE-2026-127203 | AppFlowy-IO AppFlowy Cloud up to 0.9.64 Blob put_blob_handler cross site scripting

A vulnerability, which was classified as problematic, has been found in AppFlowy-IO AppFlowy Cloud up to 0.9.64. This impacts the function put_blob_handler of the component Blob Handler. This manipulation causes cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability appears as CVE-2026-127203. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More