6.5 Medium

CVE-2026-24555 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artplacer…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artplacer ArtPlacer Widget artplacer-widget allows Stored XSS.This issue affects ArtPlacer Widget: from n/a through <= 2.23.2.

Affected products and versions

Product	Affected versions	Fixed in
ArtPlacer Widget 2.23	earliest → 2.23.2	No fix stated

The 2 CVEs of ArtPlacer Widget →

CVE-2025-67517 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in artplacer… 8.5 High

Do you use ArtPlacer Widget?

Track this CVE Watch ArtPlacer Widget Check my SBOMs

www.cveye.io/en/cve/CVE-2026-24555

Timeline

Published January 23, 2026
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2026-24555 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artplacer…

Description

Affected products and versions

Other CVEs of ArtPlacer Widget