Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-56263

Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Crawl4AI before 0.8.7 contains a stored cross-site scripting vulnerability in the monitor dashboard that renders crawl URLs and error messages via innerHTML without escaping. An attacker can submit a crafted crawl request with malicious markup that executes in an operator's browser when viewing the dashboard.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Crawl4AI Crawl4AI

Default version status: unaffected

  • 0 to < 0.8.7affected
  • 0.8.7unaffected
pkg:pypi/crawl4ai

References