CVE-2026-30862
Critical Stored XSS & Privilege Escalation in Appsmith
CRITICAL 9.0EPSS 0.5%
Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget (TableWidgetV2). The root cause is a lack of HTML sanitization in the React component rendering pipeline, allowing malicious attributes to be interpolated into the DOM. By leveraging the "Invite Users" feature, an attacker with a regular user account (user@gmail.com) can force a System Administrator to execute a high-privileged API call (/api/v1/admin/env), resulting in a Full Administrative Account Takeover. This vulnerability is fixed in 1.96.
- Affected
- appsmithorg · appsmith
- CVSS v3.1 GITHUB
- 9.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H - EPSS
- 0.46% chance of exploitation in the next 30 days, 39th percentile
- Published
- 2026-03-09
- Updated
- 2026-03-10
Proof-of-concept exploits (1)
- drkim-dev/CVE-2026-308623★ · 2026-04-10