提交 #769630: CesiumGS Cesium <=1.137.0 Cross-Site Scripting

Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sandcastle standalone demo viewer. An attacker can craft a malicious URL containing a specially encoded payload that executes arbitrary JavaScript code in the victim's browser context.

• 来源: ⚠️ https://github.com/AnalogyC0de/public_exp/issues/18
• 用户: Ana10gy (UID 93358)
• 提交: 2026-03-01 00時14分 (7 月前)
• 管理: 2026-03-11 17時49分 (11 days later)
• 状态: 已接受
• VulDB条目: 350473 [CesiumGS CesiumJS 直到 1.137.0 standalone.html c 跨网站脚本]
• 积分: 16