Description
The seefl package v0.1.1 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability via a malicious filename rendered in a directory listing.
Remediation
References
https://hackerone.com/reports/665302
Related Vulnerabilities
CVE-2021-41183 Vulnerability in maven package org.webjars.npm:jquery-ui
CVE-2020-8127 Vulnerability in maven package org.webjars.bower:reveal.js
CVE-2023-24789 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-parent
CVE-2020-19676 Vulnerability in maven package com.alibaba.nacos:nacos-api