Description
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.
Remediation
References
Related Vulnerabilities
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-11327)
WordPress Plugin External Media without Import Cross-Site Scripting (1.0.1)
Jenkins Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-27623)