EUVD-2026-77032
GHSA-xq53-pwg9-5mgh
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stored XSS requires authenticated post (PR:L) and victim page view (UI:R); scope changes to victim browser (S:C) enabling session theft (C:L) and DOM manipulation (I:L).
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely.
AnalysisAI
Stored cross-site scripting in the comment rendering layer of bbs-springboot 3.0.0 allows an authenticated low-privileged user to inject arbitrary HTML and JavaScript that executes in the browsers of other users who view the affected comment sections. The root cause, confirmed by the patch diff, is the Vue.js frontend's use of the v-html directive in ChildComment.vue and LatestComment.vue, which renders comment content as raw HTML rather than escaped text. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated low-privileged account (PR:L per CVSS 4.0) to post a comment containing malicious HTML or JavaScript. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P, score 5.1) accurately reflects the moderate real-world risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the upstream fix from https://github.com/maliangnansheng/bbs-vue3-ui/pull/2, which replaces `v-html` with `v-text` in `ChildComment.vue` and `LatestComment.vue`. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today