CVE-2020-23814

Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file...

CVE-2020-23814

Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file...

CVE-2020-23814

XXL-JOB v2.2.0 contains stored XSS vulnerabilities (CVE-2020-23814) exploitable via AppName and AddressList in JobGroupController.java. Nuclei templates confirm the issue and specify the impact as arbitrary script injection by an authenticated user, with potential session cookie theft or administ...