Stored Cross-Site Scripting Vulnerability in AdBlock Fast by OpenWrt

CVE-2026-68583

What is CVE-2026-68583?

The AdBlock Fast application prior to version 1.2.4-4 is susceptible to a stored cross-site scripting vulnerability. This allows lower-privileged users to inject malicious HTML code into the blocklist name field. When the administrator accesses the AdBlock Fast status page, the injected scripts can execute in their browser's context under the LuCI origin, potentially compromising the security of the administrator's session and the application.

References