CVE-2026-90567 | quequnlong shiyi-blog up to 1.2.1 Search index.vue highlightKeyword title/summary cross site scripting (IK5SPD)

September 12, 2026 Yanac

A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. It has been rated as problematic. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument title/summary leads to cross site scripting.

This vulnerability is documented as CVE-2026-90567. The attack can be initiated remotely. There is not any exploit available.

The project was informed of the problem early through an issue report.VulDB Recent EntriesRead More