THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-w7qw-5wfv-gwx9 (medium) — Snipe-IT has CSS Injection via `header_color` Setting

[GHSA] GHSA-w7qw-5wfv-gwx9 (medium) — Snipe-IT has CSS Injection via `header_color` Setting

highgithub_advisoriesPublished 2026-08-28

GHSA-w7qw-5wfv-gwx9 Severity: medium CVE: CVE-2026-55481

Snipe-IT has CSS Injection via `header_color` Setting

### Impact

Because `default.blade.php` is the base layout loaded on every authenticated page, all active user sessions are affected immediately upon the next page load after the payload is saved. An attacker who has compromised an admin account (or who is a malicious insider) can use t

Indicators of compromise

CVE-2026-55481cve
https://attacker.com/exfil?c=url
https://attacker.com/exfil?c=%27+document.cookieurl

Original source: https://github.com/advisories/GHSA-w7qw-5wfv-gwx9