XXuxueli

Products

Exploited and recent CVEs

• CVE-2026-94426 Low 3.5 xuxueli xxl-job insert cross site scripting 0.3%
• CVE-2026-94145 Low 3.5 xuxueli xxl-job Task Management JobInfoController.java cross site scripting 0.3%
• CVE-2026-90489 Low 3.5 Xuxueli xxl-job insert cross site scripting 0.3%
• CVE-2026-90488 Medium 6.3 Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection 0.4%
• CVE-2026-90487 Medium 4.3 Xuxueli xxl-job JobGroupController.java privileges management 0.3%
• CVE-2026-65316 Medium 6.5 xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat 0.5%
• CVE-2026-7306 Medium 5.6 Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key 0.3%
• CVE-2026-7305 Medium 6.3 Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgery 0.2%
• CVE-2026-7303 Low 3.7 Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection 0.4%
• CVE-2026-3733 Medium 6.3 xuxueli xxl-job JobInfoController.java server-side request forgery 0.2%
• CVE-2025-9264 Medium 5.4 Xuxueli xxl-job Jobs JobInfoController.java remove resource injection 0.4%
• CVE-2025-9263 Medium 4.3 Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection 0.3%
• CVE-2025-7789 Low 3.7 Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash 0.3%
• CVE-2025-7788 Medium 6.3 Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection 4.9%
• CVE-2025-7787 Medium 6.3 Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery 0.5%
• CVE-2025-6701 Low 3.5 Xuxueli xxl-sso doLogin redirect 0.3%
• CVE-2025-6700 Medium 4.3 Xuxueli xxl-sso login cross site scripting 0.5%
• CVE-2024-3366 Low 3.5 Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection 0.9%