erzhongxmu JEEWMS Cross-Site Scripting Vulnerability in JeecgListDemoController
Vulnerability
A reflected cross-site scripting vulnerability has been identified in erzhongxmu JEEWMS versions up to 3.7. The issue resides in the doAdd function of the JeecgListDemoController, where the Name parameter is manipulated, allowing the injection of malicious JavaScript. This vulnerability can be exploited remotely, with no authentication required, although it does necessitate user interaction.
Impact
Exploitation of this vulnerability allows for the execution of arbitrary JavaScript in the context of the victim's browser.
Added: Feb 23, 2026, 10:23 PM
Updated: Feb 23, 2026, 10:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
7.5remediation
0.0relevance
3.1threat
6.4urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.