a466350665 Smart-SSO Cross-Site Scripting Vulnerability in Role Edit Page

A stored cross-site scripting vulnerability has been identified in a466350665 Smart-SSO versions through 2.1.1. The issue arises in the Role Edit Page, specifically within the Save function of the UserController.java file. This vulnerability allows for the injection of malicious scripts that are executed when other users access the affected page. The vulnerability can be exploited remotely, but requires authentication and user interaction.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the affected page.