CVE-2026-90570

Name of the Vulnerable Software and Affected Versions linlinjava litemall versions 1.4.0 through 1.8.0

Description A remote cross site scripting issue exists in the Product Detail component within the file litemall-vue/src/views/items/detail/index.vue. The flaw occurs when the detail argument is manipulated within the AdminGoodsService.validate() function, allowing an attacker to execute malicious scripts in the victim's browser.

Recommendations As a temporary workaround, restrict access to the AdminGoodsService.validate() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.