PT-2026-48171 · Undefined · Undefined

Published

2026-06-09

·

Updated

2026-06-09

·

CVE-2026-36725

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the notice content parameter.

Related Identifiers

CVE-2026-36725

Affected Products

Undefined