| 标题 | https://github.com/xuxueli/xxl-job/ xxl-job-admin 3.5.0 Stored Cross-Site Scripting Attack |
|---|
| 描述 | In the XXL-JOB 3.5.0 version, the '/jobinfo/insert' interface has an XSS vulnerability. A normal user can construct a string containing malicious JavaScript code in the name and author parameters. When the administrator views the task management interface, these codes will be executed, potentially leading to the theft of sensitive information (such as cookies). |
|---|
| 来源 | ⚠️ https://github.com/hhhh333/CVE/blob/main/xxl-job-xss.md |
|---|
| 用户 | hhhha (UID 89875) |
|---|
| 提交 | 2026-07-16 03時24分 (2 月前) |
|---|
| 管理 | 2026-09-12 10時04分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 403077 [Xuxueli xxl-job 直到 3.5.0 /jobinfo/insert name/author 跨网站脚本] |
|---|
| 积分 | 18 |
|---|