Cool-Admin-Java Stored Cross-Site Scripting Vulnerability in Parameter List Module

A stored cross-site scripting vulnerability has been identified in the Parameter List module of Cool-Admin-Java version 1.0. This vulnerability allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the 'internet pictures' field.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, log into the Cool-Admin-Java application and navigate to the Parameter List module. Once there, inject a script or HTML payload into the 'internet pictures' field. After saving the changes, the injected payload will be executed, demonstrating the cross-site scripting vulnerability.