Threats tagged 'ghsa-c8q7-hfwp-8gxx'

A cross-site scripting (XSS) vulnerability exists in xuxueli xxl-job up to version 3.5.0 in the /jobgroup/insert endpoint due to improper handling of the Name argument. This vulnerability can be exploited remotely and has been publicly disclosed. The vendor has not responded to the disclosure, and no patch or fix is currently available. The CVSS score is 3.5, indicating a low severity impact.