Description
A cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entities with crafted properties that, when viewed by an administrator, can execute arbitrary JavaScript in the context of the NXRM application.
Remediation
References
Related Vulnerabilities
PHP CVE-2024-2757 Vulnerability (CVE-2024-2757)
WordPress Plugin PayPal Digital Goods powered by Cleeng Cross-Site Scripting (2.2.13)
Perl Out-of-bounds Write Vulnerability (CVE-2024-56406)
WordPress Plugin Dynamic Featured Image Unspecified Vulnerability (1.0.3)
Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62266)