Vulnerabilidades do Xuxueli Xxl-api

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Xuxueli Xxl-api: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:xuxueli:xxl-api

CVE-2025-60646 Média · 6.1 CWE-79 12/11/2025

Cross-site Scripting (XSS) em Xuxueli Xxl-api

A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.

CVE-2025-60645 Média · 6.5 CWE-352 12/11/2025

Cross-Site Request Forgery (CSRF) em Xuxueli Xxl-api

A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a crafted GET request.