一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月14日

CVE-2026-90564 [LOW] – A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the func

未分类
📑 文章目录

A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chat_msg leads to cross site scripting. The attack may be performed from remote. The project was informed of the problem early through an issue report but has not responded yet.