CVE-2026-88420
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 25, 2026
Vendor
unknown
Description
A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload.