CVE-2025-60646
Cross-site scripting in Xuxueli Xxl API
CVSS score
6.1
EPSS probability
%0.2
Risk score
0.0
Published
11 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://gist.github.com/LockeTom/0a02c0b2e2011abfbdf4e5fdbcc9b371
Makefile Go / Python
Similar Vulnerabilities
8.8
CVE-2023-33779Incorrect authorization in Xuxueli Xxl Job
Patch status unknown Public Exploits:1EPSS %1
5.3
5.3
CVE-2026-90487Xuxueli xxl-job JobGroupController.java privileges management
Patch status unknownEPSS %0
5.1
CVE-2026-94426xuxueli xxl-job insert cross site scripting
Patch status unknownEPSS %0
5.1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-60646"