| عنوان | SeaCMS V13.3 Cross Site Scripting |
|---|
| الوصف | See https://gitee.com/fushuling/cve/blob/master/SeaCMS%2013.2%20XSS%20.md for details
SeaCMS 13.3 has a cross-site scripting (XSS) vulnerability. The root cause of this vulnerability is that some user input is not properly filtered and encoded, allowing malicious users to inject and execute malicious JavaScript code. Attackers can bypass input validation and output escape mechanisms by carefully constructing malicious scripts, inject malicious code into the page, and then execute it in the victim's browser.
POC：url/js/player/dmplayer/player/index.php?next="</script><script>alert('xss')</script>"&nextdz=1 |
|---|
| المصدر | ⚠️ https://gitee.com/fushuling/cve/blob/master/SeaCMS%2013.2%20XSS%20.md |
|---|
| المستخدم | fushuling (UID 45488) |
|---|
| ارسال | 12/02/2025 04:08 PM (2 سنوات منذ) |
|---|
| الاعتدال | 21/02/2025 04:10 PM (9 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 272577 [SeaCMS 12.9 index.php color/vid/url البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|