| 제목 | https://github.com/xuxueli/xxl-job/ xxl-job-admin 3.5.0 Stored Cross-Site Scripting Attack |
|---|
| 설명 | In the XXL-JOB 3.5.0 version, the '/jobinfo/insert' interface has an XSS vulnerability. A normal user can construct a string containing malicious JavaScript code in the name and author parameters. When the administrator views the task management interface, these codes will be executed, potentially leading to the theft of sensitive information (such as cookies). |
|---|
| 원천 | ⚠️ https://github.com/hhhh333/CVE/blob/main/xxl-job-xss.md |
|---|
| 사용자 | hhhha (UID 89875) |
|---|
| 제출 | 2026. 07. 16. AM 03:24 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 12. AM 10:04 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 403077 [Xuxueli xxl-job 까지 3.5.0 /jobinfo/insert name/author 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 18 |
|---|