| عنوان | long2ice fastapi-admin 0.1.4 Cross Site Scripting (XSS) |
|---|
| الوصف | A stored XSS vulnerability was discovered in the Category module of FastAPI-Admin. Malicious JavaScript code injected into a form field (e.g. Category Name) is stored in the backend and rendered without proper sanitization. When an admin or any user visits the category list or detail view, the script executes in their browser context. |
|---|
| المصدر | ⚠️ https://github.com/fastapi-admin/fastapi-admin/issues/182 |
|---|
| المستخدم | hacker_rootki (UID 84361) |
|---|
| ارسال | 17/04/2025 08:39 PM (1 سنة منذ) |
|---|
| الاعتدال | 01/05/2025 02:21 PM (14 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 275850 [fastapi-admin 0.1.4 Create Product Product Name البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|