https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:36:04.551832+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6986 CVE-2024-6986 — Cross-site Scripting (XSS) in parisneo/lollms-webui 2026-10-06T14:36:04.567884+00:00

Affected: parisneo/lollms-webui

A Cross-site Scripting (XSS) vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the 'v-html' directive, which inserts the content of the 'full_template' variable directly as HTML. This allows an attacker to execute malicious JavaScript code by injecting a payload into the 'System Template' input field under main configurations.