What is GHSA-7868-rq46-qvm4?

GHSA-7868-rq46-qvm4 is a security advisory published by GitHub Security Advisories with Medium severity. Mettle SendPortal 3.0.1 and earlier contains a stored cross-site scripting (XSS) vulnerability in...

Which CVE IDs does GHSA-7868-rq46-qvm4 cover?

GHSA-7868-rq46-qvm4 covers the following CVE IDs: CVE-2026-26483. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7868-rq46-qvm4?

GHSA-7868-rq46-qvm4 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-7868-rq46-qvm4MediumCVSS 6.1

Mettle SendPortal 3.0.1 and earlier contains a stored cross-site scripting (XSS) vulnerability in...

Vendor

GitHub Security Advisories

Published

July 20, 2026

Last Modified

July 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-26483 →

📋 Description

Mettle SendPortal 3.0.1 and earlier contains a stored cross-site scripting (XSS) vulnerability in the template management functionality. The application fails to properly sanitize user-supplied input in the content parameter of the /templates endpoint, allowing an attacker to persistently inject malicious JavaScript code that is executed in the browsers of users who access the affected template.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-26483
https://gist.github.com/WinBlah12/8dbc1eae788945c6ea6ab1a2cdfd7cb1
https://github.com/mettle/sendportal
https://github.com/advisories/GHSA-7868-rq46-qvm4