Description
XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /xxl-job-admin/jobinfo.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/2836
Related Vulnerabilities
CVE-2019-12395 Vulnerability in maven package us.dynmap:dynmap
CVE-2022-38900 Vulnerability in maven package org.webjars.npm:decode-uri-component
CVE-2020-7598 Vulnerability in maven package org.webjars.npm:minimist
CVE-2020-26938 Vulnerability in npm package oauth2-server
CVE-2021-23631 Vulnerability in npm package convert-svg-core