| عنوان | https://github.com/xuxueli/xxl-job/ xxl-job-admin 3.5.0 Stored Cross-Site Scripting Attack |
|---|
| الوصف | In the XXL-JOB 3.5.0 version, the '/jobinfo/insert' interface has an XSS vulnerability. A normal user can construct a string containing malicious JavaScript code in the name and author parameters. When the administrator views the task management interface, these codes will be executed, potentially leading to the theft of sensitive information (such as cookies). |
|---|
| المصدر | ⚠️ https://github.com/hhhh333/CVE/blob/main/xxl-job-xss.md |
|---|
| المستخدم | hhhha (UID 89875) |
|---|
| ارسال | 16/07/2026 03:24 AM (2 أشهر منذ) |
|---|
| الاعتدال | 12/09/2026 10:04 AM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 403077 [Xuxueli xxl-job حتى 3.5.0 /jobinfo/insert name/author البرمجة عبر المواقع] |
|---|
| النقاط | 18 |
|---|