CVE-2026-90570

LOW 2.4

linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting

CVSS Score

2.4

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file litemall-vue/src/views/items/detail/index.vue of the component Product Detail. Such manipulation of the argument detail leads to cross site scripting. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-79 CWE-94
Vendor	linlinjava
Product	litemall
Published	Sep 13, 2026

Stay Ahead of the Next One

Get instant alerts for linlinjava litemall

Be the first to know when new low vulnerabilities affecting linlinjava litemall are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

linlinjava / litemall

1.4.0 1.5.0 1.6.0 1.7.0 1.8.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/403155 vuldb.com: https://vuldb.com/vuln/403155/cti vuldb.com: https://vuldb.com/cve/CVE-2026-90570 vuldb.com: https://vuldb.com/submit/912674 gitee.com: https://gitee.com/linlinjava/litemall/issues/IK5SVR gitee.com: https://gitee.com/linlinjava/litemall/

Credits

🔍 JunRoinxxX (VulDB User) VulDB CNA Team