Aitangbao Springboot-Manager Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Aitangbao Springboot-Manager version 3.0. This issue resides in the '/sys/permission' file, where the 'name' parameter is not properly sanitized, allowing for the injection of malicious scripts. The vulnerability can be exploited remotely and requires user interaction. Successful exploitation could lead to the theft of cookies, phishing attacks, or the propagation of worms.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.