Threats tagged 'ghsa-p97w-828x-xgcq'

CVE-2026-90528 is a cross-site scripting (XSS) vulnerability in the TDuckApp tduck-platform affecting versions 5.0 through 5.3. The flaw exists in an unknown functionality within the file tduck-front/src/views/form/write/index.vue related to the Form Write View component. The vulnerability is triggered by manipulation of the submitShowCustomPageContent argument and can be exploited remotely. The project has been informed but has not yet responded or issued a fix.