| शीर्षक | https://github.com/xuxueli/xxl-job xxl-job <=3.5.0 Stored Cross-Site Scripting Attack |
|---|
| विवरण | In XXL-JOB versions <=3.5.0, the '/jobinfo/insert' interface's `name` parameter is vulnerable to Cross-Site Scripting (XSS). Normal users can construct strings containing malicious JavaScript code in the name and author parameters. When an administrator views the task management interface, these codes will be executed, potentially leading to the theft of sensitive information (such as cookies). |
|---|
| स्रोत | ⚠️ https://github.com/hhhh333/CVE/blob/main/xxl-job-xss%202.md |
|---|
| उपयोगकर्ता | hhhha (UID 89875) |
|---|
| सबमिशन | 17/07/2026 09:14 AM (2 महीनों पहले) |
|---|
| संयम | 20/09/2026 10:26 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 408060 [xuxueli xxl-job तक 3.4.2/3.5.0 Task Management Interface JobInfoController.java name/author क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|