CVE-2026-112148 | LY LIFF SDK up to 2.31.0 URL cross site scripting

October 20, 2026 Yanac

A vulnerability was found in LY LIFF SDK up to 2.31.0 and classified as problematic. This vulnerability affects unknown code of the component URL Handler. Such manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-112148. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More