1024-lab SmartAdmin Stored Cross-Site Scripting Vulnerability in Notice Module

A stored cross-site scripting vulnerability has been identified in 1024-lab SmartAdmin versions through 3.29. The issue resides in the Notice module, specifically within the file 'smart-admin-web-javascript/src/views/business/oa/notice/components/notice-form-drawer.vue'. This vulnerability allows attackers to inject malicious JavaScript that is executed in the browsers of users who view the affected notice.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the notice.