Description
XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/2836
Related Vulnerabilities
CVE-2021-23337 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash
CVE-2022-25927 Vulnerability in maven package org.webjars.bowergithub.faisalman:ua-parser-js
CVE-2022-25881 Vulnerability in maven package org.webjars.npm:http-cache-semantics
CVE-2023-26140 Vulnerability in npm package @excalidraw/excalidraw
CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-media-embed