CVE-2026-90527 in shiyi-bloginfo

Prediction

by VulDB Data Team • 09/12/2026

A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsible

VulDB

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

low

Sources

Do you know our Splunk app?

Download it now for free!