CoreCVE
Back

MEDIUM

TDuckApp tduck-platform Form Write View index.vue cross site scripting

Published Sep 13, 2026

Description

A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-front/src/views/form/write/index.vue of the component Form Write View. This manipulation of the argument submitShowCustomPageContent causes cross site scripting. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Sep 13, 2026
Updated Sep 14, 2026
Reserved Sep 12, 2026
Link CVE-2026-90528
CISA Vulnrichment
Updated Sep 14, 2026
NVD
Status Deferred
Modified Sep 14, 2026
Link CVE-2026-90528
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-90528
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a