Donglight Bookstore Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Donglight Bookstore version 1.0.0. The issue arises in the 'updateUser' function of the 'AdminUserControlle.java' file, where input data is not properly sanitized, allowing for the injection of malicious scripts. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, access the user list and select a user to edit. In the nickname field, insert a script tag containing JavaScript code, such as an alert command. Once the input is submitted, the injected script will be executed, demonstrating the cross-site scripting vulnerability.