Invia #550909: code-projects My-Blog-layui v1.0 Cross Site Scripting

There is a cross-site scripting attack in the /v1/blog/edit interface of BlogController.java. The parameter is directly written into the database without filtering the dangerous function of xss.

• Fonte: ⚠️ https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-xss-1.md
• Utente: 77cc (UID 83650)
• Sottomissione: 04/04/2025 04:15 (1 Anno fa)
• Moderazione: 14/04/2025 14:54 (10 days later)
• Stato: Accettato
• Voce VulDB: 304646 [ZHENFENG13/code-projects My-Blog-layui 1.0 /admin/v1/blog/edit cross site scripting]
• Punti: 16