| Название | youlaitech vue3-element-admin <=v3.4.0 XSS |
|---|
| Описание | A second-order stored Cross-Site Scripting (XSS) vulnerability has been identified in the notice management system. Authenticated users with notice creation or edit privileges can inject malicious JavaScript that will execute in the browsers of other users when they view the compromised notice. |
|---|
| Источник | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/vue3-element-admin/report.md |
|---|
| Пользователь | Ana10gy (UID 93358) |
|---|
| Представление | 18.12.2025 05:11 (10 месяцы назад) |
|---|
| Модерация | 30.12.2025 19:39 (13 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 339080 [youlaitech vue3-element-admin до 3.4.0 Notice index.vue межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|