| عنوان | 南昌蓝智科技有限公司 Jspxcms 10.2.0 Cross-site scripting |
|---|
| الوصف | Jspxcms is a scalable, enterprise-class open source web content management system (CMS).
Jspxcms v10.2.0 has a cross-site scripting vulnerability, which is caused by background modification of document title parameters without filtering, and an attacker can exploit this vulnerability to execute arbitrary Web scripts or HTML by injecting well-designed payloads. |
|---|
| المصدر | ⚠️ https://github.com/sweatxi/BugHub/blob/main/Jspxcms.pdf |
|---|
| المستخدم | hexixi (UID 59932) |
|---|
| ارسال | 13/01/2024 08:38 AM (3 سنوات منذ) |
|---|
| الاعتدال | 16/01/2024 04:25 PM (3 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 250837 [Jspxcms 10.2.0 Document Management Page InfoController.java title البرمجة عبر المواقع] |
|---|
| النقاط | 18 |
|---|