Quequnlong Shiyi Blog
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Quequnlong Shiyi Blog.
By the Year
In 2026 there have been 3 vulnerabilities in Quequnlong Shiyi Blog with an average score of 5.2 out of ten. Last year, in 2025 Shiyi Blog had 3 security vulnerabilities published. At the current rates, it appears that the number of vulnerabilities last year and this year may equal out. Last year, the average CVE base score was greater by 3.47
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 3 | 5.17 |
| 2025 | 3 | 8.63 |
It may take a day or so for new Shiyi Blog vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Quequnlong Shiyi Blog Security Vulnerabilities
XSS in shiyi-blog Search component before 1.2.1
CVE-2026-90567
5.1 - Medium
- September 13, 2026
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument title/summary leads to cross site scripting. The attack can be initiated remotely. The project was informed of the problem early through an issue report.
XSS
XSS via chat_msg in quequnlong shiyi-blog 1.0-1.2.1 (chat sendMsg)
CVE-2026-90564
5.1 - Medium
- September 13, 2026
A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chat_msg leads to cross site scripting. The attack may be performed from remote. The project was informed of the problem early through an issue report but has not responded yet.
XSS
XSS in quequnlong shiyi-blog 1.2.1 Add Message API (body.content)
CVE-2026-90527
5.3 - Medium
- September 13, 2026
A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.
XSS
quequnlong shiyi-blog <1.2.1: Job Handler Deserialization Remote
CVE-2025-12305
6.3 - Medium
- October 27, 2025
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has been made public and could be used.
Marshaling, Unmarshaling
CVE-2025-5510 SSRF in quequnlong shiyi-blog <=1.2.1
CVE-2025-5510
9.8 - Critical
- June 03, 2025
A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
SSRF
shiyi-blog <=1.2.1 Path Traversal via /api/file/upload
CVE-2025-5509
9.8 - Critical
- June 03, 2025
A vulnerability classified as critical has been found in quequnlong shiyi-blog up to 1.2.1. This affects an unknown part of the file /api/file/upload. The manipulation of the argument file/source leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Directory traversal
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Quequnlong Shiyi Blog or by Quequnlong? Click the Watch button to subscribe.
