CVE-2026-94145

Name of the Vulnerable Software and Affected Versions xuxueli xxl-job versions 3.4.2 and 3.5.0

Description A cross site scripting issue exists in the Task Management Interface within the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobInfoController.java. A remote attacker can trigger this by manipulating the name or author arguments. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.