CVE-2024-32545: Canva – Design Beautiful Blog Graphics

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Canva Canva – Design beautiful blog graphics allows Reflected XSS.This issue affects Canva – Design beautiful blog graphics: from n/a through 1.2.4.

Affected products

  • Canva Canva – Design Beautiful Blog Graphics: up to and including 1.2.4

Published 2024-04-17. Last modified 2026-06-17.