CVE-2026-108942 | CVSS: 3.5 | 严重级别: LOW
A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function create_html_for_item of the file modules/ui_extra_networks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description results in cross site scripting. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. All versions in the repository are affected, as the codebase is based on AUTOMATIC1111/st
参考链接:
• https://github.com/philz1337x/clarity-upscaler/
• https://github.com/philz1337x/clarity-upscaler/issues/72
• https://vuldb.com/cve/CVE-2026-108942
📌 数据来源: NVD 官方