CVE-2026-45228

score

<0.1

cvss

5.4

epss

0.3%

published

2026-05-13

kev added

—

first seen

2026-10-21

Quark Drive < 0.8.5 contains a stored cross-site scripting vulnerability caused by unescaped push_config key names rendered with Vue.js v-html directive in System Configuration page, letting authenticated attackers execute arbitrary scripts, exploit requires authentication.