CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the Task Management Interface of the xxl-job component, specifically affecting versions up to 3.4.2 and 3.5.0. This flaw allows remote attackers to manipulate the 'name' or 'author' arguments, potentially leading to unauthorized script execution in users' browsers. Organizations using affected versions of xxl-job should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. This vulnerability affects unknown code of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobInfoController.java of the component Task Management Interface. The manipulation of the argument name/author leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.