What is GHSA-2w4j-r762-9783?

GHSA-2w4j-r762-9783 is a security advisory published by GitHub Security Advisories with Medium severity. A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of...

Which CVE IDs does GHSA-2w4j-r762-9783 cover?

GHSA-2w4j-r762-9783 covers the following CVE IDs: CVE-2026-88420. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2w4j-r762-9783?

GHSA-2w4j-r762-9783 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-2w4j-r762-9783MediumCVSS 6.1

A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of...

Vendor

GitHub Security Advisories

Published

September 25, 2026

Last Modified

September 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-88420 →

📋 Description

A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-88420
https://gist.github.com/itsmohitnarayan/89de718efb225e840719478ed949bd51
https://github.com/advisories/GHSA-2w4j-r762-9783