Description
A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/3223
Related Vulnerabilities
CVE-2021-32014 Vulnerability in npm package xlsx
CVE-2020-7755 Vulnerability in npm package dat.gui
CVE-2021-23392 Vulnerability in npm package locutus
CVE-2023-37950 Vulnerability in maven package com.mabl.integration.jenkins:mabl-integration
CVE-2021-39147 Vulnerability in maven package com.thoughtworks.xstream:xstream