Cross-Site Scripting Vulnerability in quequnlong Shiyi-Blog Search Component

CVE-2026-90567

What is CVE-2026-90567?

A security vulnerability has been identified in the quequnlong shiyi-blog's search component, specifically within the highlightKeyword function found in index.vue. This issue allows an attacker to manipulate the title or summary arguments, potentially leading to cross-site scripting. By exploiting this flaw, a malicious actor can execute harmful scripts in the context of users’ browsers, compromising the security of their session. The quequnlong team was alerted to this vulnerability early via an issue report, emphasizing the importance of maintaining up-to-date software to mitigate such risks.

References