PT-2026-51506
CVE-2026-56263
·
Published
2026-06-16
·
Updated
2026-07-12
Description by
CVSS 4.0
9.2
CriticalMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Crawl4AI versions prior to 0.8.7
Description
A stored cross-site scripting issue exists in the monitor dashboard. The application renders crawl URLs and error messages using
innerHTML without proper escaping. This allows an attacker to submit a crafted crawl request containing malicious markup, which then executes in the browser of an operator viewing the dashboard.Recommendations
Update to version 0.8.7 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾