medium6.1
CVE-2022-26533
Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.
Impact
Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alistgo | Alist | through 2.1.0 |