Enviar #311886: https://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scriptinginformación

Títulohttps://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scripting
DescripciónOwl Admin System /admin-api/upload_image File Upload Lead to Stored XSS Vulnerability.Attacker can bypass file upload restrictions and cause files with malicious code to be uploaded.
Fuente⚠️ https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
Usuario
 LIYU (UID 67244)
Sumisión2024-04-07 11:38 (hace 3 años)
Moderación2024-04-14 10:49 (7 days later)
EstadoAceptado
Entrada de VulDB260606 [slowlyo OwlAdmin hasta 3.5.7 Image File Upload /admin-api/upload_image file secuencias de comandos en sitios cruzados]
Puntos16

Do you want to use VulDB in your project?

Use the official API to access entries easily!