xuxueli has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was September 2026 with 4. The median CVSS is 3.9 (low). The most common weakness class is CWE-94 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 3.9
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-90488Medium· 6.3A vulnerability was determined in Xuxueli xxl-job up to 3.4.247CVE-2026-94145Low· 3.5A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.031CVE-2026-90489Low· 3.5A vulnerability was identified in Xuxueli xxl-job up to 3.5.031CVE-2026-90487Medium· 4.3A vulnerability was found in Xuxueli xxl-job up to 3.4.224
xuxueli vulnerabilities
CVEs affecting xuxueli, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-94145Low· 3.5PoCA vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0
A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. This vulnerability affects unknown code of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobInfoController.java of the component Task Manag…
CVE-2026-90489Low· 3.5PoCA vulnerability was identified in Xuxueli xxl-job up to 3.5.0
A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author leads to cross site scripting. The attack can be executed r…
CVE-2026-90488Medium· 6.3PoCA vulnerability was determined in Xuxueli xxl-job up to 3.4.2
A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/com/xxl/job/core/glue/GlueFactory.java. This manipulation causes code injection.…
CVE-2026-90487Medium· 4.3A vulnerability was found in Xuxueli xxl-job up to 3.4.2
A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobGroupController.java. The manipulation result…