Submit #557385: Vendor JSite 1.0 Stored Cross-Site Scripting Attackinfo

TitleVendor JSite 1.0 Stored Cross-Site Scripting Attack
DescriptionVersion 1.0 of JSite /sys/office/save interface has a Cross-Site Scripting (XSS) vulnerability. Attackers can inject malicious JavaScript code through the remarks parameter.
Source⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/XSS2.md
User
 anshub (UID 30822)
Submission04/14/2025 03:37 (1 Year ago)
Moderation04/26/2025 09:14 (12 days later)
StatusAccepted
VulDB entry306306 [baseweb JSite up to 1.0 /sys/office/save Remarks cross site scripting]
Points15

Do you know our Splunk app?

Download it now for free!