إرسال #311808: https://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scriptingالمعلومات

عنوانhttps://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scripting
الوصفEmlog Pro 2.2.10 /admin/tag.php exsits Stored XSS Vulnerability.XSS attacks can be used to steal sensitive information from users, such as session tokens, cookies, or personal data. Attackers can inject malicious scripts that send this information to their own servers, effectively compromising user accounts and privacy.In the Dice CMS system, it's possible to steal the administrator's cookie, thereby taking over the account.
المصدر⚠️ https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.md
المستخدم
 LIYU (UID 67244)
ارسال07/04/2024 04:24 AM (2 سنوات منذ)
الاعتدال14/04/2024 05:44 AM (7 days later)
الحالةتمت الموافقة
إدخال VulDB260603 [Emlog Pro 2.2.10 Post Tag /admin/tag.php البرمجة عبر المواقع]
النقاط19

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!