CVE-2026-3725

CVE-2026-3725 affects 1024-lab/lab1024 SmartAdmin up to version 3.29. The issue resides in the FreeMarker Template Handler, specifically the function freemarkerResolverContent in MailService.java. Manipulating the argument template_content can lead to improper neutralization of special elements u...

CVE-2026-3721

CVE-2026-3721 reports a cross-site scripting (XSS) vulnerability in the SmartAdmin package by 1024-lab/lab1024, affecting the Help Documentation Module up to version 3.29. The issue is traced to an unspecified function within sa-base/src/main/java/net/lab1024/sa/base/module/support/helpdoc/domain...

CVE-2026-3720

1024-lab/lab1024 SmartAdmin up to 3.29 contains a Cross-Site Scripting (XSS) flaw in the Notice module, specifically in smart-admin-web-javascript/src/views/business/oa/notice/components/notice-form-drawer.vue. The vulnerability arises from manipulation of the Notice feature, enabling remote atta...