Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/13 12:00 a.m.•1 views

CVE-2026-90564: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chatmsg leads to cross site scripting. The attack...

5.1CVSS3.7AI score0.00348EPSS
SaveExploits0References3
Rows per page
Query Builder