THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-90527 (MEDIUM 4.3) — A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attac

[NVD] CVE-2026-90527 (MEDIUM 4.3) — A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attac

mednvdPublished 2026-09-13

CVE-2026-90527 CVSS: 4.3 MEDIUM Published: 2026-09-13T15:16:28.487

A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attack can be executed remotely. The project was informed

Indicators of compromise

CVE-2026-90527cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-90527