Threats tagged 'ghsa-v5cr-c793-7mvp'

JeeSite version 5.15.1 contains a stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint. This flaw allows attackers to inject malicious scripts or HTML via the msgContent parameter, which can be executed in the context of users viewing the affected content. The vulnerability has a CVSS score of 6.1, indicating a medium severity level.