CVE-2025-26895

Name of the Vulnerable Software and Affected Versions: m1.DownloadList versions 0.19 and earlier

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a DOM-Based XSS vulnerability in m1.DownloadList. This allows an attacker to inject malicious code into the webpage, potentially leading to unauthorized access or data theft.

Recommendations: For versions 0.19 and earlier, update to a version that fixes the DOM-Based XSS vulnerability. As a temporary workaround, consider restricting user input to prevent malicious code injection until a patch is available.