| عنوان | youlaitech vue3-element-admin <=v3.4.0 XSS |
|---|
| الوصف | A second-order stored Cross-Site Scripting (XSS) vulnerability has been identified in the notice management system. Authenticated users with notice creation or edit privileges can inject malicious JavaScript that will execute in the browsers of other users when they view the compromised notice. |
|---|
| المصدر | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/vue3-element-admin/report.md |
|---|
| المستخدم | Ana10gy (UID 93358) |
|---|
| ارسال | 18/12/2025 05:11 AM (10 أشهر منذ) |
|---|
| الاعتدال | 30/12/2025 07:39 PM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 339080 [youlaitech vue3-element-admin حتى 3.4.0 Notice index.vue البرمجة عبر المواقع] |
|---|
| النقاط | 17 |
|---|