{"id":"CVE-2026-73031","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-73031","summary":"telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing…","details":"telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw message content directly to v-html without HTML escaping or sanitization, enabling stored, cross-user, zero-click execution of injected payloads such as image onerror handlers when victims browse or search messages.","published":"2026-08-11T20:18:46.173","modified":"2026-08-11T20:18:46.173","cvss":{"score":8.7,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/GramSearch/telegram-search/pull/654","label":"GramSearch/telegram-search#654"},"references":[{"type":"WEB","url":"https://github.com/GramSearch/telegram-search"},{"type":"WEB","url":"https://github.com/GramSearch/telegram-search/issues/653"},{"type":"WEB","url":"https://github.com/GramSearch/telegram-search/pull/654"},{"type":"WEB","url":"https://github.com/groupultra/telegram-search/commit/54f6adced844ce9990228d75e31348bfed934e05"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/telegram-search-stored-xss-via-v-html-in-messagelist-vue"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-11T20:18:46.173"}}