Description
The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text.
Remediation
References
https://github.com/zlgxzswjy/BUI-select-xss
Related Vulnerabilities
CVE-2023-50101 Vulnerability in maven package com.jfinal:jfinal
CVE-2020-36049 Vulnerability in maven package org.webjars.npm:socket.io-parser
CVE-2023-3691 Vulnerability in npm package layui
CVE-2018-14041 Vulnerability in maven package org.webjars.bower:bootstrap
CVE-2023-3691 Vulnerability in maven package org.webjars.bowergithub.layui:layui