CVE-2026-90567

Name of the Vulnerable Software and Affected Versions quequnlong shiyi-blog versions prior to 1.2.2

Description A remote cross site scripting issue exists in the Search component within the file blog-web/src/components/Search/index.vue. The flaw occurs in the highlightKeyword() function when processing the title or summary arguments, allowing an attacker to execute malicious scripts.

Recommendations Update to a version newer than 1.2.1. As a temporary workaround, restrict the use of the highlightKeyword() function until a patch is applied.