CVE-2022-40365: Gocron Project Gocron

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross site scripting (XSS) vulnerability in ouqiang gocron through 1.5.3, allows attackers to execute arbitrary code via scope.row.hostname in web/vue/src/pages/taskLog/list.vue.

Affected products

• Gocron Project Gocron: up to and including 1.5.3

Published 2022-09-14. Last modified 2026-06-17.