Canvas
canvasVulnerabilities:
1
Last Updated:
July 12, 2026
Active Installs:
10000
Published
Title
Fixed in
CVSS
Published
2026-06-12
Title
Canvas < 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Block Attribute
Fixed in
CVSS
5.5 (medium)