CNNVD-202602-013 Information
Feb 01, 2026
cve
CNNVD ID
CNNVD-202602-013
Related CVE
- CNNVD Published: 2026-02-01
Description (Chinese)
QWE是QWE公司的一个文档下载器。 QWE 2.0.1版本存在跨站脚本漏洞，该漏洞源于路径参数操作存在输入验证漏洞，可能导致存储型跨站脚本攻击。
Description (English)
QWE is a document downloader for QWE. Version QWE 2.0.1 has a cross-site script loophole, which stems from input verification gaps in the path parameter operation, which may result in a storage-type cross-site script attack.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
QWE
Published
2026-02-01
Last Modified
2026-02-24
References
https://apps.apple.com/us/app/qwe/id935520103 https://www.vulncheck.com/advisories/qwe-dl-persistent-xss-vulnerability-via-path-parameter https://www.vulnerability-lab.com/get_content.php?id=2326
Share on: