9 matches found
CVE-2026-106701
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting XSS via the component WebSocketServer, SpringSecurityConfig, deploy.vue...
CVE-2026-106701: Undefined Security Weakness
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting XSS via the component WebSocketServer, SpringSecurityConfig, deploy.vue...
CVE-2026-106701
ELADMIN v2.7 and before are vulnerable to Cross Site Scripting (XSS) . The vulnerability exists within the WebSocketServer , SpringSecurityConfig , and deploy.vue components. Exploitation of this flaw could allow an attacker to execute malicious scripts in a user's browser session. No specific re...
CVE-2026-106701
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting XSS via the component WebSocketServer, SpringSecurityConfig, deploy.vue...
CVE-2026-106701
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting XSS via the component WebSocketServer, SpringSecurityConfig, deploy.vue...
PT-2026-115095
Name of the Vulnerable Software and Affected Versions ELADMIN versions prior to 2.7 Description Cross Site Scripting XSS occurs via the WebSocketServer component, SpringSecurityConfig, and deploy.vue. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other...
CVE-2026-106701
ELADMIN v2.7 and before is vulnerable to Cross Site Scripting XSS via the component WebSocketServer, SpringSecurityConfig, deploy.vue...
