Description
xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3329
Related Vulnerabilities
CVE-2021-32854 Vulnerability in maven package org.webjars.bower:textangular
CVE-2020-7627 Vulnerability in npm package node-key-sender
CVE-2010-2103 Vulnerability in maven package org.apache.axis2:axis2
CVE-2020-12827 Vulnerability in maven package org.webjars.npm:mjml
CVE-2016-10735 Vulnerability in maven package org.jszip.redist:bootstrap