漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
Dromara J2eeFAST Announcement cross site scripting
漏洞信息
A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 7a9e1a00e3329fdc0ae05f7a8257cce77037134d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-227868.
漏洞信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
漏洞
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
漏洞
J2eeFAST 跨站脚本漏洞
漏洞信息
J2eeFAST是一个Java EE 企业级快速开发平台， 致力于打造中小企业最好用的开源免费的后台框架平台。 Dromara J2eeFAST 2.6.0版本及之前版本存在跨站脚本漏洞。攻击者利用该漏洞执行跨站脚本攻击。
漏洞信息
N/A
漏洞
N/A