CVE-2026-90569

Name of the Vulnerable Software and Affected Versions linlinjava litemall versions 1.5.0 through 1.8.0

Description A flaw in the Admin Topic Handler component allows for remote cross site scripting (XSS), a technique where malicious scripts are injected into trusted websites. The issue resides within the AdminTopicController.validate() function located in the litemall-vue/src/views/items/topic/index.vue file.

Recommendations As a temporary workaround, consider restricting the use of the AdminTopicController.validate() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.