| 标题 | youlaitech vue3-element-admin <=v3.4.0 XSS |
|---|
| 描述 | A second-order stored Cross-Site Scripting (XSS) vulnerability has been identified in the notice management system. Authenticated users with notice creation or edit privileges can inject malicious JavaScript that will execute in the browsers of other users when they view the compromised notice. |
|---|
| 来源 | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/vue3-element-admin/report.md |
|---|
| 用户 | Ana10gy (UID 93358) |
|---|
| 提交 | 2025-12-18 05時11分 (10 月前) |
|---|
| 管理 | 2025-12-30 19時39分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 339080 [youlaitech vue3-element-admin 直到 3.4.0 Notice index.vue 跨网站脚本] |
|---|
| 积分 | 17 |
|---|