Description
A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.
Remediation
References
https://hackerone.com/reports/403692
Related Vulnerabilities
CVE-2023-45135 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-war
CVE-2023-34464 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2023-24458 Vulnerability in maven package org.jenkins-ci.plugins:bearychat
CVE-2020-28442 Vulnerability in maven package org.webjars.npm:js-data
CVE-2017-11556 Vulnerability in maven package org.webjars.npm:node-sass