CNNVD-202602-040 Information
Feb 02, 2026
cve
CNNVD ID
CNNVD-202602-040
Related CVE
- CNNVD Published: 2026-02-02
Description (Chinese)
Talishar是Talishar开源的一个游戏客户端。 Talishar存在跨站脚本漏洞，该漏洞源于playerID参数未清理和转义，可能导致存储型跨站脚本攻击。
Description (English)
Talishar is a game client of Talishar’s open source. Talishar had a cross-site script loophole, which stemmed from the uncleaning and transposition of PlayerID parameters, which could lead to storage-type cross-site script attacks.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
Talishar
Published
2026-02-02
Last Modified
2026-02-24
References
https://github.com/Talishar/Talishar/commit/09dd00e5452e3cd998eb1406a88e5b0fa868e6b4 https://github.com/Talishar/Talishar/security/advisories/GHSA-rrr4-h2pc-57g6