| 제목 | youlaitech vue3-element-admin <=v3.4.0 XSS |
|---|
| 설명 | A second-order stored Cross-Site Scripting (XSS) vulnerability has been identified in the notice management system. Authenticated users with notice creation or edit privileges can inject malicious JavaScript that will execute in the browsers of other users when they view the compromised notice. |
|---|
| 원천 | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/vue3-element-admin/report.md |
|---|
| 사용자 | Ana10gy (UID 93358) |
|---|
| 제출 | 2025. 12. 18. AM 05:11 (6 개월 ago) |
|---|
| 모더레이션 | 2025. 12. 30. PM 07:39 (13 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 339080 [youlaitech vue3-element-admin 까지 3.4.0 Notice index.vue 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|