lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page where the "intro" field is not properly sanitized or escaped.
History

Thu, 12 Feb 2026 22:00:00 +0000

Type Values Removed Values Added
Description lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page where the "intro" field is not properly sanitized or escaped.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-02-12T21:43:44.454Z

Reserved: 2026-01-09T00:00:00.000Z

Link: CVE-2025-70845

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-02-12T22:16:03.740

Modified: 2026-02-12T22:16:03.740

Link: CVE-2025-70845

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.