CVE-2022-41431

CVE-2022-41431 affects xzs v3.8.0. A cross-site scripting (XSS) vulnerability exists in the /admin/question/edit component, where an attacker can inject malicious script via the Title field. The vulnerability enables execution of arbitrary web scripts/HTML in the affected web app. Documents speci...