| Titel | dreamer_cms <=4.1.3.1 storage-type XSS |
|---|
| Beschreibung | A serious vulnerability was found in dreamer_cms. This vulnerability affects the file upload function of the UploadController.java file. A carefully crafted PDF file upload can lead to stored XSS. |
|---|
| Quelle | ⚠️ https://github.com/Hao-Ni/CVE/issues/5 |
|---|
| Benutzer | fatd0g (UID 84578) |
|---|
| Einreichung | 10.05.2025 08:09 (vor 1 Jahr) |
|---|
| Moderieren | 24.05.2025 19:45 (14 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 248938 [Dreamer CMS 4.1.3 /upload/uploadFile Datei erweiterte Rechte] |
|---|
| Punkte | 0 |
|---|