tag

Oauth-Backdoor

Postiz Arbitrary File Upload to Stored XSS / Account Takeover (CVE-2026-40487)

CVE-2026-40487 / GHSA-44wg-r34q-hvfx· Postiz (open-source social media management platform, gitroomhq/postiz-app) patched