CVE-2023-26120

CVSS v3.1 6.1 (Medium)

EPSS 0.14 % (51^th)

Affected Products 1

Advisories 1

This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-admin/user/add and /xxl-job-admin/user/update.

Weaknesses

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE Status: PUBLISHED
CNA: Snyk
Published Date: 2023-04-10 05:15:07
(17 months ago)
Updated Date: 2023-11-07 04:09:23
(10 months ago)

Affected Products

Xuxueli

Xxl-job

Configuration #1

		CPE23	From	Up To
	Xuxueli Xxl-job	cpe:2.3:a:xuxueli:xxl-job