medium6.1
CVE-2022-40365
ouqiang gocron Cross-site scripting vulnerability
Impact
Cross site scripting (XSS) vulnerability in ouqiang gocron through 1.5.3, allows attackers to execute arbitrary code via scope.row.hostname in web/vue/src/pages/taskLog/list.vue.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/ouqiang/gocron | <= 1.5.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gocron Project | Gocron | through 1.5.3 |