A resource injection vulnerability exists in Xuxueli xxl-job versions prior to 3.4.0 in the logDetailCat function of the Execution Log Handler component. This flaw allows improper control of resource identifiers via manipulation of the logId argument. The vulnerability is remotely exploitable but considered difficult to exploit and has low severity. A public exploit is available. Upgrading to version 3.4.0 addresses the issue.