Description
XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/2836
Related Vulnerabilities
CVE-2022-3952 Vulnerability in maven package com.manydesigns:portofino-microservice-launcher
CVE-2020-14968 Vulnerability in maven package org.webjars.bower:jsrsasign
CVE-2020-8441 Vulnerability in maven package org.jyaml:jyaml
CVE-2021-43090 Vulnerability in maven package com.predic8:soa-model-core
CVE-2021-23341 Vulnerability in maven package org.webjars.npm:prismjs