| शीर्षक | RuoYi https://github.com/yangzongzhuan/RuoYi <=v4.8.1 Stored XSS |
|---|
| विवरण | When users add notification announcements, they can insert XSS payloads without any restrictions, which are then stored in the database. On the display page, the content is output without any encoding processing, resulting in stored XSS vulnerabilities. |
|---|
| स्रोत | ⚠️ https://github.com/yangzongzhuan/RuoYi/issues/294 |
|---|
| उपयोगकर्ता | ZAST.AI (UID 87884) |
|---|
| सबमिशन | 18/07/2025 11:23 AM (1 वर्ष पहले) |
|---|
| संयम | 19/07/2025 04:08 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 317016 [yangzongzhuan RuoYi तक 4.8.1 SysNoticeController.java addSave क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|