CVE-2026-1116

A Cross-site Scripting XSS vulnerability was identified in the "fromdict" method of the "AppLollmsMessage" class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of sanitization or HTML encoding of the "content" field when deserializing user-provided data. This...