| عنوان | 1024-lab SmartAdmin ≤3.29 Stored Cross-Site Scripting (XSS) |
|---|
| الوصف | A Stored Cross-Site Scripting (XSS) vulnerability exists in the Notice module of SmartAdmin([https://gitee.com/lab1024/smart-admin](https://gitee.com/lab1024/smart-admin)) v3.0, an enterprise-level rapid development platform. Attackers can inject malicious JavaScript code through the rich text editor, which will be executed in the browser of other users when they view the malicious notice.
SmartAdmin https://gitee.com/lab1024/smart-admin
SmartAdmin https://github.com/1024-lab/smart-admin |
|---|
| المصدر | ⚠️ https://www.notion.so/SmartAdmin-Stored-Cross-Site-Scripting-XSS-in-Notice-module-310ea92a3c41806ebcf0e5f82bf222da |
|---|
| المستخدم | din4 (UID 50867) |
|---|
| ارسال | 23/02/2026 03:01 PM (6 أشهر منذ) |
|---|
| الاعتدال | 07/03/2026 01:21 PM (12 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 349663 [1024-lab/lab1024 SmartAdmin حتى 3.29 Notice notice-form-drawer.vue البرمجة عبر المواقع] |
|---|
| النقاط | 17 |
|---|