提交 #554565: https://gitee.com/baseweb/JSite JSite 1.0 Stored Cross-Site Scripting Attack

Version 1.0 of JSite /sys/user/save interface has a Cross-Site Scripting (XSS) vulnerability. Attackers can inject malicious JavaScript code through the 'name' parameter.

• 来源: ⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/XSS1.md
• 用户: valerian (UID 83711)
• 提交: 2025-04-09 03時00分 (1 年前)
• 管理: 2025-04-18 04時44分 (9 days later)
• 状态: 已接受
• VulDB条目: 305611 [baseweb JSite 1.0 /a/sys/user/save name 跨网站脚本]
• 积分: 15