CVE-2026-90569: Cross Site Scripting in linlinjava litemall
A cross-site scripting (XSS) vulnerability exists in linlinjava litemall versions 1.5.0, 1.6.0, 1.7.0, and 1.8.0. The flaw is located in the AdminTopicController.validate function within the Admin Topic Handler component. This vulnerability allows remote attackers to inject malicious scripts. The project has been informed but has not yet responded or issued a fix.
AI Analysis
Technical Summary
CVE-2026-90569 is a cross-site scripting vulnerability affecting linlinjava litemall versions 1.5.0 through 1.8.0. The issue resides in the AdminTopicController.validate function in the file litemall-vue/src/views/items/topic/index.vue, specifically within the Admin Topic Handler component. This flaw allows remote attackers to execute script code via crafted input, leading to potential XSS attacks. The vulnerability was reported early to the project, but no response or patch has been provided to date.
Potential Impact
The vulnerability enables remote attackers to perform cross-site scripting attacks by injecting malicious scripts through the vulnerable AdminTopicController.validate function. This can lead to the execution of arbitrary scripts in the context of the affected application, potentially compromising user sessions or data. However, there is no indication of active exploitation in the wild.
Mitigation Recommendations
No official fix or patch has been released by the vendor as of the current information. Users should monitor the vendor's communications for updates. Until a patch is available, consider applying input validation or sanitization controls at the application or web server level to mitigate XSS risks.
CVE-2026-90569: Cross Site Scripting in linlinjava litemall
Description
A cross-site scripting (XSS) vulnerability exists in linlinjava litemall versions 1.5.0, 1.6.0, 1.7.0, and 1.8.0. The flaw is located in the AdminTopicController.validate function within the Admin Topic Handler component. This vulnerability allows remote attackers to inject malicious scripts. The project has been informed but has not yet responded or issued a fix.
CVSS v4.0
Score 4.8medium
Affected software
linlinjava
litemall
pkg:github/linlinjava/litemallcpe:2.3:a:linlinjava:litemall:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-90569 is a cross-site scripting vulnerability affecting linlinjava litemall versions 1.5.0 through 1.8.0. The issue resides in the AdminTopicController.validate function in the file litemall-vue/src/views/items/topic/index.vue, specifically within the Admin Topic Handler component. This flaw allows remote attackers to execute script code via crafted input, leading to potential XSS attacks. The vulnerability was reported early to the project, but no response or patch has been provided to date.
Potential Impact
The vulnerability enables remote attackers to perform cross-site scripting attacks by injecting malicious scripts through the vulnerable AdminTopicController.validate function. This can lead to the execution of arbitrary scripts in the context of the affected application, potentially compromising user sessions or data. However, there is no indication of active exploitation in the wild.
Mitigation Recommendations
No official fix or patch has been released by the vendor as of the current information. Users should monitor the vendor's communications for updates. Until a patch is available, consider applying input validation or sanitization controls at the application or web server level to mitigate XSS risks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-12T16:03:21.720Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aa6d00555bf5e2cf5d33d39
Added to database: 09/13/2026, 16:32:05 UTC
Last enriched: 09/13/2026, 16:46:32 UTC
Last updated: 09/13/2026, 16:47:06 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.