Unknown · Laravel Starter · CVE-2025-26159
**Name of the Vulnerable Software and Affected Versions**
Laravel Starter version 11.11.0
**Description**
The issue concerns Cross Site Scripting (XSS) in the tags feature. Users who can create or modify tags can inject malicious JavaScript code into the name field.
**Recommendations**
For Laravel Starter version 11.11.0, update to a version that fixes the XSS issue in the tags feature, ensuring that user input in the name field is properly sanitized to prevent malicious JavaScript code injection.