إرسال #634158: mtons https://gitee.com/mtons/mblog <=3.5.0 Reflected XSSالمعلومات

عنوانmtons https://gitee.com/mtons/mblog <=3.5.0 Reflected XSS
الوصفThe /admin/post/list endpoint is used for viewing article lists in the admin panel, the search function's user-controlled title parameter has no security checks, and the output has no encoding processing, thus creating reflected XSS vulnerabilities.
المصدر⚠️ https://gitee.com/mtons/mblog/issues/ICPMMQ
المستخدم
 ZAST.AI (UID 87884)
ارسال14/08/2025 06:04 AM (11 أشهر منذ)
الاعتدال25/08/2025 11:40 AM (11 days later)
الحالةتمت الموافقة
إدخال VulDB321273 [mtons mblog حتى 3.5.0 Admin Panel /admin/post/list عنوان البرمجة عبر المواقع]
النقاط17

Do you want to use VulDB in your project?

Use the official API to access entries easily!