Description
This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-admin/user/add and /xxl-job-admin/user/update.
Remediation
References
https://security.snyk.io/vuln/SNYK-JAVA-COMXUXUELI-3248764
Related Vulnerabilities
CVE-2021-4264 Vulnerability in npm package dustjs-linkedin
CVE-2017-11342 Vulnerability in npm package node-sass
CVE-2019-16728 Vulnerability in maven package org.webjars.bower:dompurify
CVE-2023-30516 Vulnerability in maven package org.jenkins-ci.plugins:image-tag-parameter
CVE-2019-13237 Vulnerability in maven package org.opencms:opencms-core