CVE-2026-52439

An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...

CVE-2026-52439

An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...

EUVD-2026-48431

An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...

CVE-2026-52439

Affected software: xiandafu beetl 3.20.2. The vulnerability arises from the type.new function combined with the property reflection mechanism, allowing a remote attacker to execute arbitrary code. The impact is remote code execution with high severity (as per CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H...

PT-2026-64173

Name of the Vulnerable Software and Affected Versions xiandafu beetl version 3.20.2 Description A remote attacker can execute arbitrary code by leveraging the type.new function and the property reflection mechanism. Property reflection is a process that allows a program to inspect and modify its...

CVE-2026-52439

An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...

CVE-2026-52439

An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...

CVE-2026-8759

A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads to improper neutralization of specia...

CVE-2026-8759

A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads to improper neutralization of specia...

EUVD-2026-30704

A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads to improper neutralization of specia...

CVE-2026-8759

Technical details are not publicly available in the provided documents; no affected versions, vectors, or fixes are specified beyond the description. Monitor for updates.

EUVD-2022-51700

Malicious code in bioql PyPI...

CVE-2022-4347

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

CVE-2022-4347

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

Cross site scripting

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

CVE-2022-4347

The CVE-2022-4347 entry concerns xiandafu beetl-bbs WebUtils.java and a cross-site scripting vulnerability. The known issue is that manipulating the user argument can trigger XSS, with remote exploitation and a publicly disclosed exploit. The connected documents provide no product version ranges ...

PT-2022-26931 · Unknown · Xiandafu Beetl-Bbs

Name of the Vulnerable Software and Affected Versions: xiandafu beetl-bbs affected versions not specified Description: A vulnerability was found in xiandafu beetl-bbs, affecting an unknown functionality of the file WebUtils.java. The manipulation of the user argument leads to cross-site scripting...

CVE-2022-4347 xiandafu beetl-bbs WebUtils.java cross site scripting

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...