high7.6
CVE-2026-5301
Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisone…
Impact
Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entries
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coolercontrol | Coolercontrold | before 4.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/coolercontrol/coolercontrol/-/blob/2.0.0/coolercontrol-ui/src/views/AppInfoView.vue?ref_type=tags#L224
- https://gitlab.com/coolercontrol/coolercontrol/-/blob/3.1.1/coolercontrol-ui/src/views/AppInfoView.vue?ref_type=tags#L350
- https://gitlab.com/coolercontrol/coolercontrol/-/releases/4.0.0