Description
ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.
Remediation
References
https://github.com/ruibaby/halo/issues/9
Related Vulnerabilities
CVE-2017-5638 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2023-26487 Vulnerability in npm package vega-functions
CVE-2022-1295 Vulnerability in maven package org.webjars.bower:fullpage.js
CVE-2023-29199 Vulnerability in npm package vm2
CVE-2021-25933 Vulnerability in maven package org.opennms:opennms-webapp