| عنوان | paicoding Latest version as of 2026.02.12 Improper Neutralization of Alternate XSS Syntax |
|---|
| الوصف | PaiCoding application contains a stored XSS vulnerability in the article publishing functionality. The article content field is not sanitized before storage, allowing authenticated attackers to inject malicious JavaScript code that executes when other users view the article. This vulnerability affects all users who view the malicious article, including admin. |
|---|
| المصدر | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/AGJpd5u3hoMcpZxaojccf9J0nZd?from=from_copylink |
|---|
| المستخدم | xcxr (UID 86629) |
|---|
| ارسال | 12/02/2026 09:36 AM (8 أشهر منذ) |
|---|
| الاعتدال | 23/02/2026 05:39 PM (11 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 306301 [itwanger paicoding 1.0.3 /article/app/post content البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|