| عنوان | https://github.com/xuxueli/xxl-job xxl-job <=3.5.0 Stored Cross-Site Scripting Attack |
|---|
| الوصف | In XXL-JOB versions <=3.5.0, the '/jobinfo/insert' interface's `executorHandler` parameter is vulnerable to Cross-Site Scripting (XSS). Normal users can construct strings containing malicious JavaScript code in the name and author parameters. When an administrator views the task management interface, these codes will be executed, potentially leading to the theft of sensitive information (such as cookies). |
|---|
| المصدر | ⚠️ https://github.com/hhhh333/CVE/blob/main/xxl-job-xss%20%203.md |
|---|
| المستخدم | hhhha (UID 89875) |
|---|
| ارسال | 17/07/2026 09:40 AM (3 أشهر منذ) |
|---|
| الاعتدال | 20/09/2026 08:57 PM (2 months later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 403077 [Xuxueli xxl-job حتى 3.5.0 /jobinfo/insert name/author البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|