| Titel | kalvinGit CMS 2021-09-09 Doubled Character XSS Manipulations |
|---|
| Beschreibung | A severe vulnerability has been discovered in kvf-admin, where file uploads can lead to the ability to read files and there exists a stored XSS vulnerability. |
|---|
| Quelle | ⚠️ https://github.com/daxiangya/kvf-admin/issues/1 |
|---|
| Benutzer | vientiane (UID 75134) |
|---|
| Einreichung | 19.09.2024 13:54 (vor 2 Jahren) |
|---|
| Moderieren | 27.09.2024 18:08 (8 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 278784 [kalvinGit kvf-admin bis f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff XML File config.json&action=uploadfile upfile Cross Site Scripting] |
|---|
| Punkte | 15 |
|---|