Medium · 6.1 CVE-2021-44585 EUVD-2022-1509GHSA-q448-6c3m-cxmj

Cross-site Scripting in jeecg-boot

Published Mar 10, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeecgframework.boot:jeecg-boot-base	< 3.1.0	3.1.0	GHSA-q448-6c3m-cxmj
Maven	org.jeecgframework.boot:jeecg-boot-base-core	< 3.1.0	3.1.0	GHSA-q448-6c3m-cxmj