| عنوان | WityCMS 0.6.1 "Website's name" field Stored Cross Site Scripting |
|---|
| الوصف | Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in WityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to WityCMS/admin/settings/general. |
|---|
| المصدر | ⚠️ https://github.com/Creatiwity/wityCMS/issues/150 |
|---|
| المستخدم | nathunandwani (UID 862) |
|---|
| ارسال | 28/05/2018 02:58 PM (8 سنوات منذ) |
|---|
| الاعتدال | 28/05/2018 05:52 PM (3 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 118269 [CreatiWity wityCMS 0.6.1 Website Name البرمجة عبر المواقع] |
|---|
| النقاط | 18 |
|---|