CVE-2026-90567 — quequnlong shiyi-blog Search index.vue highlightKeyword cross site scripting
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Sear…
Published: 2026-09-13 · CVSS: 5.1 · CVSS 4.0
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument title/summary leads to cross site scripting. The attack can be initiated remotely. The project was informed of the problem early through an issue report.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7