Submit #311886: https://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scriptinginfo

Titlehttps://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scripting
DescriptionOwl Admin System /admin-api/upload_image File Upload Lead to Stored XSS Vulnerability.Attacker can bypass file upload restrictions and cause files with malicious code to be uploaded.
Source⚠️ https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
User
 LIYU (UID 67244)
Submission04/07/2024 11:38 AM (1 Year ago)
Moderation04/14/2024 10:49 AM (7 days later)
StatusAccepted
VulDB Entry260606 [slowlyo OwlAdmin up to 3.5.7 Image File Upload /admin-api/upload_image cross site scripting]
Points16

Do you want to use VulDB in your project?

Use the official API to access entries easily!