Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-12228

CVE-2026-12228MEDIUM

parisneo parisneo/lollms — Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   R  C  L  L  N    5.4   .0033   24.5     —

AFFECTED
  Product          Versions       Fixed
  parisneo/lollms  unspecified –  —

TIMELINE
  Jun 14  Reserved by @huntr_ai
  Jul 18  Published (CNA: @huntr_ai)
  Aug 19  EXPLOIT PUBLISHED — CVE-2026-12228 (parisneo/lollms). Public exploit reference added.
  Aug 19  RESCORED — CVE-2026-12228 (parisneo/lollms). CVSS 8.7 → 5.4 (NVD).

CWE-79 · CNA: @huntr_ai · CVSS v3.1 · 1 reference · NVD status: Analyzed

Description

A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version). The endpoint stores attacker-controlled `prompt_content` into `DBDirectMessage.content` without server-side sanitization. When a victim opens the direct message (DM) thread, the message is rendered by the DM UI through `MessageContentRenderer`, which uses `v-html` to insert rendered HTML into the DOM. The frontend sanitizer, which is regex-based, fails to comprehensively sanitize attacker-controlled HTML, allowing malicious payloads to execute in the victim's browser context. This vulnerability enables any authenticated user to send a malicious prompt-share message to another user's inbox, leading to arbitrary JavaScript execution, authenticated actions as the victim, exposure of same-origin application data, and potential account takeover.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
June 14, 2026	Reserved	Reserved by @huntr_ai
July 18, 2026	Published	Published (CNA: @huntr_ai)
August 19, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-12228 (parisneo/lollms). Public exploit reference added.
August 19, 2026	RESCORED	RESCORED — CVE-2026-12228 (parisneo/lollms). CVSS 8.7 → 5.4 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
parisneo	parisneo/lollms	—	unspecified	—

Weaknesses

CWE-79

References (1)

https://huntr.com/bounties/25623635-5ceb-4062-8289-02089e6d97c1 [Exploit, Third Party Advisory]

Authoritative record: CVE-2026-12228 at cve.org

Vendors: parisneo

Weaknesses: CWE-79

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-12228 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.