GitHub Advisoryadvisory · Maven

GHSA-2jfg-73q2-24qv Xuxueli XXL-SSO Cross-site Scripting vulnerability

LOW Published 2025-06-26 Modified 2025-09-15 Official page ↗
Aliases
CVE-2025-6700
Ecosystem
Maven
Packages
com.xuxueli:xxl-sso
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-79
Reviewed
2025-09-15

Affected packages

• Maven com.xuxueli:xxl-sso: <= 1.1.0 (no fix yet)

Description

A vulnerability classified as problematic was found in Xuxueli xxl-sso 1.1.0. This vulnerability affects unknown code of the file /xxl-sso-server/login. The manipulation of the argument errorMsg leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Related

Alias · CVE (1)

  • CVE-2025-6700 A vulnerability classified as problematic was found in Xuxueli xxl-sso 1.1.0. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References