baseweb JSite Cross-Site Scripting Vulnerability in Version 1.0

A cross-site scripting (XSS) vulnerability has been identified in baseweb JSite version 1.0. The issue arises in the file '/a/sys/area/save', where the 'name' parameter can be manipulated to inject malicious JavaScript. This vulnerability can be exploited remotely and requires user interaction.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, navigate to the '/a/sys/area/form' page and add a root region. When prompted for the regional name, inject a script tag containing JavaScript code into the 'name' parameter. This crafted input will be executed as a script, demonstrating the cross-site scripting vulnerability.