Description
A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
Medium · 6.1
CVE-2025-60646
EUVD-2025-131951GHSA-w4r6-29hp-24wr
A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or …
Published Nov 12, 2025 · Updated Nov 12, 2025 · Assigned by mitre