CVE-2026-12228

MediumCVSS 5.4

Published: 18/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

27th percentile - higher than 27% of all known CVEs

Summary

Stored XSS vulnerability in the POST /api/prompts/share endpoint in parisneo/lollms (latest version). An attacker can store malicious JavaScript in a message, which executes in the victim's browser when opened, enabling data theft and account takeover.

Risk Assessment

Risk of arbitrary JavaScript execution in the victim's context, which could lead to session theft, data theft, and account takeover.

Recommendation

Apply proper server-side input sanitization. Update lollms to a patched version if available. Restrict message sending to trusted users.

Other vulnerabilities in lollms

CVE-2026-1116Medium
A Cross-site Scripting (XSS) vulnerability was identified in the from_dict method of the AppLollmsMessage class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of sanitization or HTML encoding of the content field when deserializing user-provided data, allowing an attacker to inject malicious HTML or JavaScript payloads executed in another user's browser. Exploitation can lead to account takeover, session hijacking, or wormable attacks.

Original NVD description (English source)

A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version). The endpoint stores attacker-controlled `prompt_content` into `DBDirectMessage.content` without server-side sanitization. When a victim opens the direct message (DM) thread, the message is rendered by the DM UI through `MessageContentRenderer`, which uses `v-html` to insert rendered HTML into the DOM. The frontend sanitizer, which is regex-based, fails to comprehensively sanitize attacker-controlled HTML, allowing malicious payloads to execute in the victim's browser context. This vulnerability enables any authenticated user to send a malicious prompt-share message to another user's inbox, leading to arbitrary JavaScript execution, authenticated actions as the victim, exposure of same-origin application data, and potential account takeover.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS