EUVD-2026-76924

A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2026-90489

A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2026-90489: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2026-90489 Xuxueli xxl-job insert cross site scripting

A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2026-90489

Xuxueli xxl-job up to 3.5.0 contains a cross-site scripting (XSS) vulnerability in the /jobinfo/insert endpoint. Manipulating the name or author arguments allows remote attackers with low privileges (requiring user interaction) to inject client-side scripts. The CVSS 3.1 base score is 3.5 (LOW) ,...

PT-2026-90729

Name of the Vulnerable Software and Affected Versions Xuxueli xxl-job versions prior to 3.5.1 Description A remote cross site scripting issue exists in the /jobinfo/insert endpoint. This occurs when the name or author variables are manipulated, allowing an attacker to execute malicious scripts in...

CVE-2026-52371

A Server-Side Request Forgery SSRF in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request...

CVE-2026-52371: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request...

CVE-2026-52371

A Server-Side Request Forgery (SSRF) vulnerability exists in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 . This flaw allows authenticated attackers to scan internal resources by providing a crafted HTTP request , forcing the server to make requests to unintended locations. No in...

CVE-2026-52371

A Server-Side Request Forgery SSRF in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request...

CVE-2026-3733 xuxueli xxl-job JobInfoController.java server-side request forgery

A vulnerability was detected in xuxueli xxl-job up to 3.3.2. This impacts an unknown function of the file source-code/src/main/java/com/xxl/job/admin/controller/JobInfoController.java. The manipulation results in server-side request forgery. It is possible to launch the attack remotely. The explo...

jobinfo.co.il Cross Site Scripting vulnerability OBB-3865646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-9MMJ-64JH-PH9C Privilege escalation in XXL-Job

A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's account via a crafted POST request to the component /jobinfo/...

CVE-2023-33779

A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's account via a crafted POST request to the component /jobinfo/...

XXL-Job 安全漏洞

XXL-JOB is a distributed task scheduling platform based on the java language from the Xu Xueli XXL-JOB community. A security vulnerability exists in XXL-Job version v2.4.1 that originates from allowing a user to execute arbitrary commands on another user's account by using a crafted POST request ...

CVE-2023-33779: Incorrect Authorization

A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's account via a crafted POST request to the component /jobinfo/...

Cross site scripting in XXL-job

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting XSS vulnerability via /xxl-job-admin/jobinfo...

CVE-2022-29770

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting XSS vulnerability via /xxl-job-admin/jobinfo...

CVE-2022-29770: Improper Neutralization of Input During Web Page Generation

XXL-Job v2.3.0 was discovered to contain a stored cross-site scripting XSS vulnerability via /xxl-job-admin/jobinfo...

RheinMetall AG - Multiple SQL Injection Vulnerabilities

Document Title: =============== RheinMetall AG - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=170 Release Date: ============= 2012-01-17 Vulnerability Laboratory ID VL-ID: ==================================== 170...