Dashboard / CVE-2026-90931

CVE-2026-90931

MEDIUM 1 PoC
MEDIUM Priority: 0.01 BB Relevance: 60/100
Published: 2026-09-14 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Passive
AT: None
VC: Low
VI: Low
VA: None

Description

LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators opens the stored SVG file served inline from the application origin, the embedded JavaScript executes in the dashboard context, enabling session hijacking and administrative account takeover.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
laradashboard laradashboard 0.9.0 < 1.3.0
laradashboard laradashboard 0.9.0 < 1.3.0

References & Advisories (2)

Proof of Concept (1)

—
https://github.com/capivara-research/CVE-2026-90931
nomi-sec

Bug Bounty Relevance

60 / 100
✓ Network accessible
✓ Low complexity
✓ PoC available (1)

CVSS Score

5.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

EPSS — Exploitation Probability

0.24%
Raw Score 0.002350
Percentile 14.4%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →

External Links