إرسال #550910: Code-projects My-Blog-layui v1.0 Cross Site Scripting

There is a cross-site scripting attack in the /v1/link/edit interface of LinkController.java. The parameter is directly written into the database without filtering the dangerous function of xss.

• المصدر: ⚠️ https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-xss-2.md
• المستخدم: 77cc (UID 83650)
• ارسال: 04/04/2025 04:16 AM (1 سنة منذ)
• الاعتدال: 14/04/2025 02:54 PM (10 days later)
• الحالة: تمت الموافقة
• إدخال VulDB: 304647 [ZHENFENG13/code-projects My-Blog-layui 1.0 /admin/v1/link/edit البرمجة عبر المواقع]
• النقاط: 16