Threats tagged 'ghsa-pj36-c4f6-677h'

A cross-site scripting (XSS) vulnerability exists in linlinjava litemall versions 1.5.0, 1.6.0, 1.7.0, and 1.8.0. The flaw is in the AdminTopicController.validate function within the Admin Topic Handler component, specifically in the file litemall-vue/src/views/items/topic/index.vue. This vulnerability can be exploited remotely and may allow an attacker to execute malicious scripts in the context of the affected application. The project has been informed but has not yet responded or issued a fix.