GHSA-8g7w-hw7q-6jwqMediumCVSS 3.5

A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this...

Published
September 13, 2026
Last Modified
September 13, 2026

🔗 CVE IDs covered (1)

📋 Description

A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument title/summary leads to cross site scripting. The attack can be initiated remotely. The project was informed of the problem early through an issue report.

🔗 References (8)