Low severity3.5NVD Advisory· Published Sep 13, 2026

CVE-2026-90528

Description

A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-front/src/views/form/write/index.vue of the component Form Write View. This manipulation of the argument submitShowCustomPageContent causes cross site scripting. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TDuckApp/tduck-platformllm-create
Range: <5.3

Patches

Vulnerability mechanics

References

gitee.com/TDuckApp/tduck-platform/issues/IK5RJDnvd
vuldb.com/cve/CVE-2026-90528nvd
vuldb.com/submit/912535nvd
vuldb.com/vuln/403118nvd
vuldb.com/vuln/403118/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000