A vulnerability, which was classified as problematic, has been found in Decap CMS up to 3.8.3. This impacts an unknown function of the component Content Preview Pane. Performing manipulation of the argument body/tags/title/description results in cross site scripting.

This vulnerability is identified as CVE-2025-57520. The attack can be initiated remotely. There is not any exploit available.