CVE-2026-22257 - Salvo is vulnerable to stored XSS in the list_html function by uploading files w

CVE ID : CVE-2026-22257 Published : Jan. 8, 2026, 6:22 p.m. | 33 minutes ago Description : Salvo is a Rust web backend framework. Prior to version 0.88.1, the function list_html generates a file view of a folder without sanitizing the files or folders names, this may potentially lead to XSS in cases where a website allow the access to public files using this feature and anyone can upload a file. This issue has been patched in version 0.88.1. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor