low3.5
CVE-2026-90567
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1.
Impact
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument title/summary leads to cross site scripting. The attack can be initiated remotely. The project was informed of the problem early through an issue report.
Affected products
| Product | Affected versions |
|---|---|
| Quequnlong Shiyi-Blog | before 1.2.1. |
Versions were read from the advisory text. No structured product data has been published for this record yet.