Description (CNA)
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument title/summary leads to cross site scripting. The attack can be initiated remotely. The project was informed of the problem early through an issue report.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| quequnlong / shiyi-blog | affected 1.2.0; affected 1.2.1 |
CWE
CWE-79, CWE-94
References
- https://vuldb.com/vuln/403152
- https://vuldb.com/vuln/403152/cti
- https://vuldb.com/cve/CVE-2026-90567
- https://vuldb.com/submit/912671
- https://gitee.com/quequnlong/shiyi-blog/issues/IK5SPD
- https://gitee.com/quequnlong/shiyi-blog/
ADP enrichment
No English description supplied.
No references supplied.