EUVD-2026-88028

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

CVE-2026-100881

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

CVE-2026-100881 zhistaredu StarTraining application.yml cross site scripting

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...

CVE-2026-100881

The zhistaredu StarTraining application (versions up to 3.8.1 ) is vulnerable to cross-site scripting (XSS) . The root cause involves the manipulation of the xss.enabled argument during the processing of the application.yml file. This vulnerability can be triggered remotely, though the attack com...