Description
JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.
Remediation
References
https://github.com/Hurdano/JavaMelody-XSS/wiki/Attack-Vector---JavaMelody
Related Vulnerabilities
CVE-2018-3721 Vulnerability in maven package org.webjars.npm:lodash.merge
CVE-2021-21141 Vulnerability in npm package electron
CVE-2022-39203 Vulnerability in npm package matrix-appservice-irc
CVE-2022-23461 Vulnerability in maven package org.webjars.npm:jodit
CVE-2022-25875 Vulnerability in maven package org.webjars.npm:svelte