Description
A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
Remediation
References
https://github.com/jeecgboot/jeecg-boot/issues/3223
Related Vulnerabilities
CVE-2021-34084 Vulnerability in npm package s3-uploader
CVE-2020-25638 Vulnerability in maven package org.hibernate:hibernate-core
CVE-2021-23373 Vulnerability in npm package set-deep-prop
CVE-2022-1330 Vulnerability in maven package org.webjars.bower:fullpage
CVE-2019-5413 Vulnerability in maven package org.webjars.npm:morgan