I. Vulnerability Overview

1.1 Summary

A Stored Cross-Site Scripting (XSS) vulnerability exists in the Help Documentation module of SmartAdmin v3.0(https://gitee.com/lab1024/smart-admin) Enterprise Rapid Development Platform. Attackers can directly submit malicious HTML content containing JavaScript code through backend API interfaces, bypassing the frontend rich text editor’s filtering mechanism. When regular users view help documentation containing malicious content, the code executes in the victim’s browser.

1.2 Affected Versions

• SmartAdmin v3.0 (Java17 SpringBoot3)
• SmartAdmin v3.0 (Java8 SpringBoot2)
• All systems using SmartAdmin framework with Help Documentation enabled

1.3 Security Impact

• Theft of user Session/Token
• Theft of user Cookies
• Execute arbitrary operations with administrator privileges
• Phishing attacks
• Malware distribution
• Persistent backdoors

1.4 Technical Details of Frontend Filter Bypass

The frontend rich text editor automatically converts HTML special characters to entities:

• < → <
• > → >
• " → "
• ' → '

However, the backend API directly receives the contentHtml field without performing reverse conversion, allowing attackers to bypass frontend filtering by directly calling the API.

II. Vulnerability Details

2.1 Vulnerability Type