| عنوان | forest forest <= 0.0.5 Improper Neutralization of Alternate XSS Syntax |
|---|
| الوصف | Forest <= 0.0.5 contains a stored XSS vulnerability in the user profile update functionality. The signature fields are not sanitized before storage, allowing authenticated attackers to inject malicious JavaScript code that executes when other users view the attacker's profile. |
|---|
| المصدر | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/MBymdGpuFoGQYuxEiH2cdC5BnSe?from=from_copylink |
|---|
| المستخدم | xcxr (UID 86629) |
|---|
| ارسال | 10/02/2026 04:37 AM (8 أشهر منذ) |
|---|
| الاعتدال | 21/02/2026 06:42 PM (12 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 347317 [rymcu forest حتى 0.0.5 User Profile UserInfoController.java updateUserInfo البرمجة عبر المواقع] |
|---|
| النقاط | 18 |
|---|