CVE-2026-26719

Published Jul 15, 2026·Updated Jul 16, 2026

NVD Description

Cross Site Scripting vulnerability in xxl-job-admin v.3.0.0 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request containing a malicious script

Public Exploits & PoCs1 found

[POC] CVE-2026-26719 — CVE-2026-26719

A stored Cross‑Site Scripting vulnerability exists in xxl-job-admin JobInfoController.java where the addressList parameter accepts unsanitized URL‑encoded JavaScript. The payload is stored and later executed in users’ browsers, lead unauthorized actions.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free