RuoYi Cross-site Scripting Vulnerability

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A cross-site scripting vulnerability exists in RuoYi versions prior to 4.7.7. The vulnerability stems from a security issue in the uploadFilesPath function of the File Upload component, which leads to cross-site...