All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-67925
NONEpublished 2026-08-17 21:16 UTC · 12 hours ago
CVSS / 10
// description
Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload