| عنوان | https://github.com/xnx3/wangmarket wangmarket 4.9 Improper Neutralization of Alternate XSS Syntax |
|---|
| الوصف | The /admin/system/variableSave.do interface in Warehouse version 4.9 has a stored XSS cross-site scripting vulnerability. Attackers can inject malicious JavaScript code into the system variables through this interface. This code is persistently stored in the database. When administrators or other users access the system variable list page, the malicious code will automatically execute in the victim's browser, thereby stealing cookies, hijacking sessions, or conducting other malicious operations. |
|---|
| المصدر | ⚠️ https://www.yuque.com/cocount-eveo/lu0220/eg6s9gropfwtoz9w?singleDoc#%20%E3%80%8AStored%20Cross-Site%20Scripting%E3%80%8B |
|---|
| المستخدم | eveo (UID 93828) |
|---|
| ارسال | 26/12/2025 09:42 AM (10 أشهر منذ) |
|---|
| الاعتدال | 04/01/2026 09:47 AM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 339484 [xnx3 wangmarket حتى 4.9 System Variables Page variableSave.do description البرمجة عبر المواقع] |
|---|
| النقاط | 20 |
|---|