提交 #469771: donglight bookstore 1.0 reflect XSS信息

标题donglight bookstore 1.0 reflect XSS
描述BookSearchList in src/main/java/org/zdd/bookstore/web/controller/BookInfoController. java did not filter the input keywords parameter, resulting in XSS reflection
来源⚠️ https://github.com/donglight/bookstore/issues/12
用户
 LVZC2 (UID 76821)
提交2024-12-27 15時17分 (2 年前)
管理2025-01-08 15時30分 (12 days later)
状态已接受
VulDB条目290788 [donglight bookstore电商书城系统说明 1.0.0 BookInfoController.java BookSearchList keywords 跨网站脚本]
积分15

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!