إرسال #239326: CSZCMS(https://www.cszcms.com/) CSZCMS V1.3.0 Stored XSSالمعلومات

عنوانCSZCMS(https://www.cszcms.com/) CSZCMS V1.3.0 Stored XSS
الوصفIn the administration background, when performing website configuration, the Additional Meta Tag section is not strictly filtered, and the running user inserts svg tags to execute code, resulting in a stored XSS vulnerability
المصدر⚠️ https://github.com/t34t/CVE/blob/main/CSZCMS/0-Store-XSS-Vulnerability-in-cszcmsV1.3.0.md
المستخدم testvul (UID 58141)
ارسال16/11/2023 10:05 AM (3 سنوات منذ)
الاعتدال26/11/2023 08:45 AM (10 days later)
الحالةتمت الموافقة
إدخال VulDB246129 [CSZCMS 1.3.0 Site Settings Page /admin/settings/ Additional Meta Tag البرمجة عبر المواقع]
النقاط16

Do you want to use VulDB in your project?

Use the official API to access entries easily!