CVE-2026-90570 | linlinjava litemall up to 1.8.0 Product Detail index.vue AdminGoodsService.validate detail cross site scripting (IK5SVR)

A vulnerability labeled as problematic has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file litemall-vue/src/views/items/detail/index.vue of the component Product Detail. Such manipulation of the argument detail leads to cross site scripting.

This vulnerability is traded as CVE-2026-90570. The attack may be launched remotely. There is no exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More