CVE-2026-109558

HIGH 8.7

EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Preview

CVSS Score

8.7

EPSS Score

0.0%

EPSS Percentile

0th

EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event handlers through an API or MCP token to run script on preview and access the privileged window.edgeeverDesktop bridge.

CWE	CWE-79
Vendor	tianma-if
Product	edgeever
Published	Oct 12, 2026

Stay Ahead of the Next One

Get instant alerts for tianma-if edgeever

Be the first to know when new high vulnerabilities affecting tianma-if edgeever are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

tianma-if / EdgeEver

1.6.0 ≤ 1.112.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/tianma-if/edgeever/issues/533 github.com: https://github.com/tianma-if/edgeever/issues/546 github.com: https://github.com/tianma-if/edgeever/commit/6b5027e8b4becbee0c0de7cd1a3d04af78ca87ca github.com: https://github.com/tianma-if/edgeever/blob/f6ade70423ba366077653dbb8ac43a677933c776/apps/web/src/components/TemplatesPane.tsx#L150-L158 github.com: https://github.com/tianma-if/edgeever vulncheck.com: https://www.vulncheck.com/advisories/edgeever-1.6.0-through-1.112.0-stored-xss-via-templatespane-template-preview

Credits

wgetnz