CVE-2022-26533

Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.

Date published : 2022-03-11

https://github.com/Xhofe/alist/issues/645