Description
ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.
Remediation
References
https://github.com/ruibaby/halo/issues/9
Related Vulnerabilities
CVE-2020-8298 Vulnerability in npm package fs-path
CVE-2023-24057 Vulnerability in maven package ca.uhn.hapi.fhir:org.hl7.fhir.utilities
CVE-2015-9241 Vulnerability in npm package hapi
CVE-2020-13920 Vulnerability in maven package org.apache.activemq:activemq-broker
CVE-2019-10062 Vulnerability in npm package aurelia-framework