Submit #557385: Vendor JSite 1.0 Stored Cross-Site Scripting Attackinfo

TitelVendor JSite 1.0 Stored Cross-Site Scripting Attack
BeschreibungVersion 1.0 of JSite /sys/office/save interface has a Cross-Site Scripting (XSS) vulnerability. Attackers can inject malicious JavaScript code through the remarks parameter.
Quelle⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/XSS2.md
Benutzer
 anshub (UID 30822)
Einreichung14.04.2025 03:37 (vor 1 Jahr)
Moderieren26.04.2025 09:14 (12 days later)
StatusAkzeptiert
VulDB Eintrag306306 [baseweb JSite bis 1.0 /sys/office/save Bemerkung Cross Site Scripting]
Punkte15

Do you want to use VulDB in your project?

Use the official API to access entries easily!