| عنوان | ruifang-tech Rebuild 3.8.5 Cross Site Scripting |
|---|
| الوصف | A Stored Cross-Site Scripting (XSS) vulnerability exists in Rebuild 3.8.5 within the project task comments functionality. Attackers can exploit this vulnerability by injecting malicious JavaScript or HTML payloads into task comments. The payload is executed whenever any project group members views an affected task comment. |
|---|
| المصدر | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskComments.md |
|---|
| المستخدم | vastzero (UID 78767) |
|---|
| ارسال | 07/12/2024 01:36 PM (2 سنوات منذ) |
|---|
| الاعتدال | 16/12/2024 09:47 AM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 288533 [ruifang-tech Rebuild 3.8.5 Project Task Comment البرمجة عبر المواقع] |
|---|
| النقاط | 18 |
|---|