Threats tagged 'ghsa-f3rc-fpw3-4x4m'

A cross-site scripting (XSS) vulnerability exists in the huanzi-qch base-admin component, specifically in the Add User Handler's Save function. The vulnerability arises from improper handling of the Username argument, allowing remote attackers to inject malicious scripts. The product uses continuous delivery with rolling releases, so no specific affected or fixed versions are provided. The vendor has not responded to disclosure attempts. The CVSS score is low (3.5), indicating limited impact.