إرسال #239326: CSZCMS(https://www.cszcms.com/) CSZCMS V1.3.0 Stored XSSالمعلومات

عنوانCSZCMS(https://www.cszcms.com/) CSZCMS V1.3.0 Stored XSS
الوصفIn the administration background, when performing website configuration, the Additional Meta Tag section is not strictly filtered, and the running user inserts svg tags to execute code, resulting in a stored XSS vulnerability
المصدر⚠️ https://github.com/t34t/CVE/blob/main/CSZCMS/0-Store-XSS-Vulnerability-in-cszcmsV1.3.0.md
المستخدم testvul (UID 58141)
ارسال16/11/2023 10:05 AM (3 سنوات منذ)
الاعتدال26/11/2023 08:45 AM (10 days later)
الحالةتمت الموافقة
إدخال VulDB246129 [CSZCMS 1.3.0 Site Settings Page /admin/settings/ Additional Meta Tag البرمجة عبر المواقع]
النقاط16

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!