Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

DataEase Stored XSS via symbol map tooltip backgroundColor (v2.10.25)

github.com 2026-09-14 查看中文 →

Security Advisory GHSA-18846 Medium DataEase

Affected:

DataEase v2.10.25
DataEase v2.10.26

Fixed in:

v2.10.26

Referenced CVEs: CVE-2026-90529 · 3.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Unauth Priv Escalation via client-controlled usertype field (CVSS 9.8) 2026-09-14 Inventory System: Auth Bypass via Missing Exit After Location Redirect (CVSS 5.3) 2026-09-14 NansBBBS Stored XSS: Unescaped Markdown HTML in Article Details 2026-09-14 Unauth SQLi in School Registration and Fee System V1.0 (save_class.php) 2026-09-13 SQL Injection in Sales and Inventory System V1.0 2026-09-13

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro