| عنوان | https://gitee.com/westboy/CicadasCMS/branches CicadasCMS 1.0 Incomplete Denylist to Cross-Site Scripting |
|---|
| الوصف | A Stored Cross-Site Scripting (XSS) vulnerability exists in CicadasCMS v1.0 that causes the system to adequately filter and escape user-entered data before it is stored on the server. An attacker can persistently store malicious code on the server by submitting maliciously constructed script content (in the new section). When other users visit a page containing this malicious content, the script will be executed in their browser, potentially leading to risks such as session hijacking, leakage of sensitive information (such as stealing cookies), malicious operation simulation, or tampering with page content |
|---|
| المصدر | ⚠️ https://github.com/devastatingglamour/CVE/blob/main/CicadasCMS-XSS2.md |
|---|
| المستخدم | xmttz (UID 89920) |
|---|
| ارسال | 18/09/2025 03:40 PM (1 سنة منذ) |
|---|
| الاعتدال | 26/09/2025 02:10 PM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 326107 [westboy CicadasCMS 1.0 save categoryName البرمجة عبر المواقع] |
|---|
| النقاط | 20 |
|---|