CVE-2026-12228

A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version). The endpoint stores attacker-controlled `prompt_content` into `DBDirectMessage.content` without server-side sanitization. When a victim opens the direct message (DM) thread, the message is rendered by the DM UI through `MessageContentRenderer`, which uses `v-html` to insert rendered HTML into the DOM. The frontend sanitizer, which is regex-based, fails to comprehensively sanitize attacker-controlled HTML, allowing malicious payloads to execute in the victim's browser context. This vulnerability enables any authenticated user to send a malicious prompt-share message to another user's inbox, leading to arbitrary JavaScript execution, authenticated actions as the victim, exposure of same-origin application data, and potential account takeover.

• CWE-79

• https://huntr.com/bounties/25623635-5ceb-4062-8289-02089e6d97c1
• https://huntr.com/bounties/25623635-5ceb-4062-8289-02089e6d97c1

Published

Jul 18, 2026

Last Modified

Jul 23, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12220A vulnerability has been found in Yealink SIP-T46U 108.86.0.…8
• CVE-2026-12221A vulnerability was found in Yealink SIP-T46U 108.86.0.118. …8
• CVE-2026-12222A vulnerability was determined in Yealink SIP-T46U 108.86.0.…8
• CVE-2026-12223A vulnerability was identified in Yealink SIP-T46U 108.86.0.…5.5
• CVE-2026-12224The Dokan Pro plugin for WordPress is vulnerable to privileg…8.8
• CVE-2026-12225syracom AG Secure Login (2FA) for Atlassian Jira, Confluence…8.7
• CVE-2026-1223PrismX MX100 AP controller developed by BROWAN COMMUNICATION…6.9
• CVE-2026-12231The Exclusive Addons for Elementor plugin for WordPress is v…6.4
• CVE-2026-12232The Intel ALH digital-audio-interface driver function dai_al…6.1
• CVE-2026-12233The PSA Protected Storage credential backend (subsys/net/lib…5.9
• CVE-2026-12234The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z…7.8
• CVE-2026-12235The Linkable Loadable Extensions (llext) subsystem mis-handl…6.3