MEDIUM 6.1 NVD

CVE-2026-106701

ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.

References

https://github.com/elunez/eladmin
https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106701.md

Published: 2026-10-15 · Source: NVD · Feed updated: 2026-10-15

This medium severity vulnerability with a CVSS score of 6.1 was published on 2026-10-15 via NVD.

vulnfeed aggregates 14677 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.