| عنوان | ChestnutCMS v1.5.2 Stored XSS |
|---|
| الوصف | The /cms/file/upload interface of ChestnutCMS v1.5.2 has a stored XSS vulnerability. Attackers can upload carefully crafted HTML or PDF files to induce administrators to access them, thereby stealing the administrator's login credentials. |
|---|
| المصدر | ⚠️ https://github.com/IceFoxH/VULN/issues/6 |
|---|
| المستخدم | icefoxh (UID 82165) |
|---|
| ارسال | 01/03/2025 09:45 AM (2 سنوات منذ) |
|---|
| الاعتدال | 06/03/2025 09:55 AM (5 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 298773 [ChestnutCMS حتى 1.5.2 /dev-api/cms/file/upload uploadFile file تجاوز الصلاحيات] |
|---|
| النقاط | 16 |
|---|