Description
XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/2836
Related Vulnerabilities
CVE-2020-9480 Vulnerability in maven package org.apache.spark:spark-network-common_2.11
CVE-2022-42466 Vulnerability in maven package org.apache.isis.core:isis-applib
CVE-2020-7690 Vulnerability in maven package org.webjars.bowergithub.mrrio:jspdf
CVE-2022-46175 Vulnerability in npm package json5
CVE-2023-42795 Vulnerability in maven package org.apache.tomcat:tomcat