| Название | https://github.com/xuxueli/xxl-job/ xxl-job-admin 3.5.0 Stored Cross-Site Scripting Attack |
|---|
| Описание | In the XXL-JOB 3.5.0 version, the '/jobinfo/insert' interface has an XSS vulnerability. A normal user can construct a string containing malicious JavaScript code in the name and author parameters. When the administrator views the task management interface, these codes will be executed, potentially leading to the theft of sensitive information (such as cookies). |
|---|
| Источник | ⚠️ https://github.com/hhhh333/CVE/blob/main/xxl-job-xss.md |
|---|
| Пользователь | hhhha (UID 89875) |
|---|
| Представление | 16.07.2026 03:24 (2 месяцы назад) |
|---|
| Модерация | 12.09.2026 10:04 (2 months later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 403077 [Xuxueli xxl-job до 3.5.0 /jobinfo/insert name/author межсайтовый скриптинг] |
|---|
| Баллы | 18 |
|---|