CVE-2021-38221

bbs-go = 3.3.0 including Custom Edition is vulnerable to stored XSS...

bbs-go 跨站脚本漏洞

bbs-go is an open source community system built using the Go language. bbs-go 3.3.0 and earlier versions have a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user data in the v-html tag of vue used by the application. An attacker could use this...