Description
xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3329
Related Vulnerabilities
CVE-2017-12629 Vulnerability in maven package org.apache.lucene:lucene-queryparser
CVE-2020-7238 Vulnerability in maven package io.netty:netty-codec-http
CVE-2020-7766 Vulnerability in npm package json-ptr
CVE-2020-7719 Vulnerability in npm package locutus
CVE-2022-37734 Vulnerability in maven package com.graphql-java:graphql-java