WinterChenS / my-site

springboot2.0开发的个人网站,集成了:个人首页,个人博客,个人作品
https://my.winterchen.com:8189
Apache License 2.0
3.26k stars 1.05k forks source link

There is a stored XSS on the article page. #74

Closed PoppingSnack closed 1 year ago

PoppingSnack commented 1 year ago

There is a stored XSS on the article page.

  1. On the "article publish" page,attackers can post an article containing a malicious script. path: http://localhost:8089/admin/article/publish image

  2. This XSS vulnerability can be triggered by attackers reading articles in the blog article interface. path: http://localhost:8089/blog/article/29 image

WinterChenS commented 1 year ago

fix it in: #77