2026年9月4日

CVE-2026-72594 [HIGH] – A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 all

未分类

📑 文章目录

A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar.

相关文章