漏洞关键信息 Title: SohuTV CacheCloud <=3.2.0 Reflected XSS Description: - In the latest version (v3.2) of CacheCloud, the endpoint /manage/redisConfig/preview does not encode user-controllable parameters when outputting them on web pages, resulting in an XSS vulnerability. This allows attackers to launch XSS attacks against users. Source: - GitHub Issue User: - ZAST.AI (UID 87884) Submission Date: - 12/16/2025 08:58 AM (18 days ago) Moderation Date: - 12/28/2025 09:19 AM (12 days later) Status: - Accepted VulDB Entry: - 238557 - SohuTV CacheCloud up to 3.2.0 RedisConfigTemplateController.java preview cross site scripting Points: - 17