CVE-2025-2209

A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-2209: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

PT-2025-10971

Name of the Vulnerable Software and Affected Versions: aitangbao springboot-manager version 3.0 Description: A problematic issue was found in the /sysDict/add file, where the manipulation of the argument name leads to cross site scripting attacks. These attacks can be launched remotely. The issue...