CVE-2026-61823

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in the rich-text editor because the HTML sanitizer permits the `srcdoc` attribute on iframe elements. Although markup inside `srcdoc` is HTML-encoded during sanitization, browsers decode attribute entities before interpreting the iframe document, allowing an authenticated user with permission to edit an Editor field to store executable JavaScript that runs when another user views the content. Successful exploitation can result in session hijacking, unauthorized actions, account takeover, privilege escalation, or disclosure of administrative data. Version 9.22.5 patches the vulnerability by removing `srcdoc` from the permitted iframe attributes. As a workaround, applications that cannot upgrade should manually sanitize all Editor field content and remove every iframe `srcdoc` attribute before storing or rendering it.

• CWE-79

• https://github.com/code16/sharp/commit/ec509a22c808a5bd9dfad6a0a85c92ce6f411e21
• https://github.com/code16/sharp/security/advisories/GHSA-qxg3-46rw-79j8

Published

Sep 24, 2026

Last Modified

Sep 24, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-61818pg_partman is a PostgreSQL extension that manages partitione…8.5
• CVE-2026-61819pg_partman is a PostgreSQL extension that manages partitione…8.5
• CVE-2026-6182A vulnerability was identified in code-projects Simple Conte…7.3
• CVE-2026-61820pg_partman is a PostgreSQL extension that manages partitione…8.5
• CVE-2026-61821pg_partman is a PostgreSQL extension that manages partitione…8.5
• CVE-2026-61822pg_partman is a PostgreSQL extension that manages partitione…6.5
• CVE-2026-61824Defuddle cleans up HTML pages. Prior to 0.19.1, site extract…8.2
• CVE-2026-61825code16 Sharp is a Laravel-based framework for building conte…8.7
• CVE-2026-61828Nixpkgs is a collection of software packages that can be ins…8.5
• CVE-2026-61829Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-6183A security flaw has been discovered in code-projects Simple …7.3
• CVE-2026-61833zot is a container image and artifact registry based on the …8.1