一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月14日

CVE-2026-90527 [MEDIUM] – A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown

未分类
📑 文章目录

A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.