Description
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument title/summary leads to cross site scripting. The attack can be initiated remotely. The project was informed of the problem early through an issue report.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| quequnlong | shiyi-blog | 1.2.0, 1.2.1 | — |
References
- VDB-403152 | quequnlong shiyi-blog Search index.vue highlightKeyword cross site scripting vdb-entry technical-description
- VDB-403152 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-90567 | CVE Analysis and Report third-party-advisory
- Submit #912671 | quequnlong shiyi-blog 1.0.0 through 1.2.1; source through 4db96f9 Cross Site Scripting third-party-advisory
- https://gitee.com/quequnlong/shiyi-blog/issues/IK5SPD issue-tracking
- https://gitee.com/quequnlong/shiyi-blog/ product