PoC Archive PoC Archive

tag

Low-Code

Critical
Budibase Authentication Bypass to Plugin-Upload Reverse Shell — CVE-2026-31816
CVE-2026-31816· Budibase (low-code platform) unpatched
Critical
Appsmith Table Widget Stored XSS to Admin Account Takeover — CVE-2026-30862
CVE-2026-30862 (GHSA-5hw4-whxv-6794)· Appsmith patched