Remote Indirect Code Injection Vulnerability Discovered in Laravel Framework

A vulnerability was discovered in Laravel that allows an attacker to perform remote indirect code injection (XSS). The security notice was issued by CERT-FR on September 10, 2026. No specific CVE identifier, affected version numbers, or technical details about the exploitation method are provided in the advisory. The vulnerability enables cross-site scripting attacks against Laravel applications.