PT-2026-1208 · Unknown · Zhanglun Lettura

·

CVE-2025-15454

·

Published

2026-01-05

·

Updated

2026-01-05

CVSS v3.1

3.1

Low

VectorAV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions zhanglun lettura versions up to 0.1.22
Description A security issue exists in zhanglun lettura affecting the RSS Handler component and specifically the processing within the src/components/ArticleView/ContentRender.tsx file. This issue results in cross site scripting, allowing for remote execution of attacks. The complexity of the attack is considered high, and exploitability is assessed as difficult. The exploit is publicly available.
Recommendations Apply patch 67213093db9923e828a6e3fd8696a998c85da2d4.

Exploit

Fix

XSS

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-15454

Affected Products

Zhanglun Lettura