Description
A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.
Remediation
References
https://hackerone.com/reports/403692
Related Vulnerabilities
CVE-2018-14041 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap
CVE-2023-35155 Vulnerability in maven package org.xwiki.platform:xwiki-platform-sharepage-api
CVE-2021-39236 Vulnerability in maven package org.apache.ozone:ozone-main
CVE-2021-23337 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash
CVE-2021-23341 Vulnerability in maven package org.webjars.npm:prismjs