1 matches found
CVE-2026-90564: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chatmsg leads to cross site scripting. The attack...
5.1CVSS3.7AI score0.00348EPSS
SaveExploits0References3
20