CVE-2026-90602
Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting
Description
A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.
INFO
Published Date :
Sept. 13, 2026, 10:45 p.m.
Last Modified :
Sept. 13, 2026, 10:45 p.m.
Remotely Exploit :
No
Source :
VulDB
Affected Products
The following products are affected by CVE-2026-90602
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
Solution
- Apply the pull request once accepted.
- Update the affected component to a fixed version.
- Monitor for official patches and apply them promptly.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-90602 vulnerability anywhere in the article.