Aitangbao Springboot-Manager Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Aitangbao Springboot-Manager version 3.0. The issue arises in the '/sysDict/add' interface, where the 'name' parameter is not properly sanitized, allowing for the injection of malicious scripts. This vulnerability can be exploited remotely and requires user interaction.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, log into the Aitangbao Springboot-Manager system version 3.0. Navigate to the 'Dictionary Management' section and select 'Add'. Inject a script payload into the 'name' or 'remark' fields. Once submitted, the injected script will be executed, demonstrating the cross-site scripting vulnerability.