إرسال #634158: mtons https://gitee.com/mtons/mblog <=3.5.0 Reflected XSSالمعلومات

عنوانmtons https://gitee.com/mtons/mblog <=3.5.0 Reflected XSS
الوصفThe /admin/post/list endpoint is used for viewing article lists in the admin panel, the search function's user-controlled title parameter has no security checks, and the output has no encoding processing, thus creating reflected XSS vulnerabilities.
المصدر⚠️ https://gitee.com/mtons/mblog/issues/ICPMMQ
المستخدم
 ZAST.AI (UID 87884)
ارسال14/08/2025 06:04 AM (1 سنة منذ)
الاعتدال25/08/2025 11:40 AM (11 days later)
الحالةتمت الموافقة
إدخال VulDB321273 [mtons mblog حتى 3.5.0 Admin Panel /admin/post/list title البرمجة عبر المواقع]
النقاط17

Want to stay up to date on a daily basis?

Enable the mail alert feature now!