lukasz-rybak/CVE-2026-22849

PoC

CVE-2026-22849 - Saleor lacks proper HTML sanitization in rich text fields

view exploit source poc_in_githubauthor lukasz-rybakpublished 2026-04-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-22849US	medium4.8	0.24% (16th)	Exploit	2026-01-21
Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.27, Saleor was allowing users to modify rich text fields with HTML wit…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.