إرسال #311886: https://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scriptingالمعلومات

عنوانhttps://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scripting
الوصفOwl Admin System /admin-api/upload_image File Upload Lead to Stored XSS Vulnerability.Attacker can bypass file upload restrictions and cause files with malicious code to be uploaded.
المصدر⚠️ https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
المستخدم
 LIYU (UID 67244)
ارسال07/04/2024 11:38 AM (2 سنوات منذ)
الاعتدال14/04/2024 10:49 AM (7 days later)
الحالةتمت الموافقة
إدخال VulDB260606 [slowlyo OwlAdmin حتى 3.5.7 Image File Upload /admin-api/upload_image ملف البرمجة عبر المواقع]
النقاط16

Want to know what is going to be exploited?

We predict KEV entries!