| Название | 1024-lab SmartAdmin ≤3.29 Stored Cross-Site Scripting (XSS) |
|---|
| Описание | A Stored Cross-Site Scripting (XSS) vulnerability exists in the Notice module of SmartAdmin([https://gitee.com/lab1024/smart-admin](https://gitee.com/lab1024/smart-admin)) v3.0, an enterprise-level rapid development platform. Attackers can inject malicious JavaScript code through the rich text editor, which will be executed in the browser of other users when they view the malicious notice.
SmartAdmin https://gitee.com/lab1024/smart-admin
SmartAdmin https://github.com/1024-lab/smart-admin |
|---|
| Источник | ⚠️ https://www.notion.so/SmartAdmin-Stored-Cross-Site-Scripting-XSS-in-Notice-module-310ea92a3c41806ebcf0e5f82bf222da |
|---|
| Пользователь | din4 (UID 50867) |
|---|
| Представление | 23.02.2026 15:01 (2 месяцы назад) |
|---|
| Модерация | 07.03.2026 13:21 (12 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 349663 [1024-lab/lab1024 SmartAdmin до 3.29 Notice notice-form-drawer.vue межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|