CVE-2026-90567

quequnlong shiyi-blog (a blog platform) is affected by a cross-site scripting (XSS) vulnerability in versions up to 1.2.1 . The flaw resides in the highlightKeyword function within the Search component (blog-web/src/components/Search/index.vue), where improper handling of the title/summary argume...

EUVD-2026-77044

A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument title/summary leads to cross site scripting. The...