Description
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.
Medium · 6.1
CVE-2026-106701
EUVD-2026-102256GHSA-m4pr-gf6w-cwrr
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.
Published Oct 15, 2026 · Updated Oct 20, 2026 · Assigned by mitre