medium4.8
CVE-2024-57409
A stored cross-site scripting (XSS) vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTM…
Impact
A stored cross-site scripting (XSS) vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beian.Miit | Cool-Admin-Java | All versions |