إرسال #380151: baidu UEditor v1.4.2 Cross Site Scriptingالمعلومات

عنوانbaidu UEditor v1.4.2 Cross Site Scripting
الوصفA reflected cross-site scripting (XSS) vulnerability has been identified in the UEditor 1.4.2. This vulnerability permits an attacker to inject malicious scripts into web pages viewed by users, potentially compromising user data and session integrity.
المصدر⚠️ https://github.com/Hebing123/cve/issues/63
المستخدم
 jiashenghe (UID 39445)
ارسال25/07/2024 01:47 PM (2 سنوات منذ)
الاعتدال31/07/2024 05:14 PM (6 days later)
الحالةتمت الموافقة
إدخال VulDB273274 [Baidu UEditor 1.4.2 controller.php?action=catchimage source[] البرمجة عبر المواقع]
النقاط17

Do you want to use VulDB in your project?

Use the official API to access entries easily!