提交 #557385: Vendor JSite 1.0 Stored Cross-Site Scripting Attack

Version 1.0 of JSite /sys/office/save interface has a Cross-Site Scripting (XSS)
vulnerability. Attackers can inject malicious JavaScript code through the remarks
parameter.

• 来源: ⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/XSS2.md
• 用户: anshub (UID 30822)
• 提交: 2025-04-14 03時37分 (1 年前)
• 管理: 2025-04-26 09時14分 (12 days later)
• 状态: 已接受
• VulDB条目: 306306 [baseweb JSite 直到 1.0 /sys/office/save 备注 跨网站脚本]
• 积分: 15