Bbs Springboot
Monthly
Stored cross-site scripting in the comment rendering layer of bbs-springboot 3.0.0 allows an authenticated low-privileged user to inject arbitrary HTML and JavaScript that executes in the browsers of other users who view the affected comment sections. The root cause, confirmed by the patch diff, is the Vue.js frontend's use of the `v-html` directive in `ChildComment.vue` and `LatestComment.vue`, which renders comment content as raw HTML rather than escaped text. No public exploit code has been identified and the vulnerability is not listed in CISA KEV.
Stored cross-site scripting in the comment rendering layer of bbs-springboot 3.0.0 allows an authenticated low-privileged user to inject arbitrary HTML and JavaScript that executes in the browsers of other users who view the affected comment sections. The root cause, confirmed by the patch diff, is the Vue.js frontend's use of the `v-html` directive in `ChildComment.vue` and `LatestComment.vue`, which renders comment content as raw HTML rather than escaped text. No public exploit code has been identified and the vulnerability is not listed in CISA KEV.