| عنوان | CMS Made Simple(https://www.cmsmadesimple.org/) CMS Made Simple V2.2.18 Stored XSS |
|---|
| الوصف | Login to the administrator background, in the Site Admin section, you can edit "Settings - News module",then in Filed Definitions,attacker can add Field Definition,a attact vector as Name value:
`<svg><animate attributename="x" dur="1s" onbegin="alert(1)"></animate></svg>`
When user visit the this website , preparing to write an article or clicking an article and read already published by the attacker, the javascript code alert(1) is executed |
|---|
| المصدر | ⚠️ https://github.com/t34t/CVE/blob/main/CMSMS/4-Stored-XSS-Vulnerability-in-CMS-Made-Simple-V2.2.18.md |
|---|
| المستخدم | testvul (UID 58141) |
|---|
| ارسال | 16/11/2023 01:44 PM (3 سنوات منذ) |
|---|
| الاعتدال | 18/11/2023 10:29 AM (2 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 176208 [CMS Made Simple 2.2.14 Setting News البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|