{"id":"CVE-2026-129141","summary":"paicoding 1.0.0 through 1.0.3 Stored XSS via JSON-LD Profile Description","details":"paicoding 1.0.0 through 1.0.3 contains a stored cross-site scripting vulnerability because SeoInjectService embeds user profile text without escaping in an inline JSON-LD script element. Authenticated attackers can add a closing script tag followed by HTML to their profile, executing scripts for visitors of their profile page and stealing the non-HttpOnly f-session cookie.","modified":"2026-11-15T02:46:40.244703342Z","published":"2026-11-13T17:22:08.971Z","database_specific":{"cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/129xxx/CVE-2026-129141.json","cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/129xxx/CVE-2026-129141.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-129141"},{"type":"ADVISORY","url":"https://vul.yulun.ac.cn/20261112/paicoding/"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/paicoding-1.0.0-through-1.0.3-stored-xss-via-json-ld-profile-description"},{"type":"REPORT","url":"https://github.com/itwanger/paicoding/issues/137"},{"type":"PACKAGE","url":"https://github.com/itwanger/paicoding"},{"type":"ARTICLE","url":"https://github.com/itwanger/paicoding/blob/903adce70309d340f7eec51ec3c80cfe3c8326c1/paicoding-ui/src/main/resources/templates/components/layout/header.html#L59"},{"type":"ARTICLE","url":"https://github.com/itwanger/paicoding/blob/903adce70309d340f7eec51ec3c80cfe3c8326c1/paicoding-web/src/main/java/com/github/paicoding/forum/web/global/SeoInjectService.java#L386-L387"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/itwanger/paicoding","events":[{"introduced":"cc528f8d8b4139a41f18c180fd0a0015489e741f"},{"last_affected":"1fecb6e3135b07e664c3b546ceb74a167c0501f6"}],"database_specific":{"extracted_events":[{"strategy":"StandardRange","range":[{"introduced":"1.0.0"},{"last_affected":"1.0.3"}],"source":"AFFECTED_FIELD"},{"source":"DESCRIPTION","range":[{"introduced":"1.0.0"},{"last_affected":"1.0.3"}]}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-129141.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N"}]}