提交 #550909: code-projects My-Blog-layui v1.0 Cross Site Scripting信息

标题code-projects My-Blog-layui v1.0 Cross Site Scripting
描述There is a cross-site scripting attack in the /v1/blog/edit interface of BlogController.java. The parameter is directly written into the database without filtering the dangerous function of xss.
来源⚠️ https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-xss-1.md
用户
 77cc (UID 83650)
提交2025-04-04 04時15分 (2 年前)
管理2025-04-14 14時54分 (10 days later)
状态已接受
VulDB条目304646 [ZHENFENG13/code-projects My-Blog-layui 1.0 /admin/v1/blog/edit 跨网站脚本]
积分16

Do you want to use VulDB in your project?

Use the official API to access entries easily!