wangjiangfei / JXC

进销存管理系统,采用SpringBoot+Shiro+MyBatis+EasyUI
MIT License
82 stars 22 forks source link

XSS vulnerability exists in JXC CMS #11

Open Liudeguang opened 2 years ago

Liudeguang commented 2 years ago

There is no XSS filter for this project, and there is global storage XSS. Including but not limited to the following routes: /goods/save /supllier/save /client/save image image

BaoZR commented 10 months ago

在pom.xml文件中加入这个就可以防住。 image