CVE-2026-118132 | NextChat 2.16.1 Plugin Editor dangerouslySetInnerHTML content cross site scripting

October 27, 2026 Yanac

A vulnerability has been found in NextChat 2.16.1 and classified as problematic. The affected element is the function dangerouslySetInnerHTML of the component Plugin Editor. Performing a manipulation of the argument content results in cross site scripting.

This vulnerability is identified as CVE-2026-118132. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More