Xuxueli vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20257
3. 202610

Newest CVEs

• CVE-2026-94426

  xuxueli xxl-job insert cross site scripting

  xuxueli · xxl-job

  Medium5.1
• CVE-2026-94145

  xuxueli xxl-job Task Management JobInfoController.java cross site scripting

  xuxueli · xxl-job

  Medium5.1
• CVE-2026-90489

  Xuxueli xxl-job insert cross site scripting

  Xuxueli · xxl-job

  Medium5.1
• CVE-2026-90488

  Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection

  Xuxueli · xxl-job

  Medium5.3
• CVE-2026-90487

  Xuxueli xxl-job JobGroupController.java privileges management

  Xuxueli · xxl-job

  Medium5.3
• CVE-2026-65316

  xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat

  xuxueli · xxl-job

  High7.1
• CVE-2026-7306

  Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key

  Xuxueli · xxl-job

  Medium6.3
• CVE-2026-7305

  Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgery

  Xuxueli · xxl-job

  Medium5.3
• CVE-2026-7303

  Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection

  Xuxueli · xxl-job

  Medium6.3
• CVE-2026-3733

  xuxueli xxl-job JobInfoController.java server-side request forgery

  xuxueli · xxl-job

  Medium5.3