Enviar #379205: Ampache 6.5.0 Cross Site Scripting
| Título | Ampache 6.5.0 Cross Site Scripting |
|---|---|
| Descripción | Ampache 6.5.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability. This vulnerability exists in the "Playlists - Democratic - Configure Democratic Playlist" feature. An attacker with Content Manager permissions can set the Name field to . When any administrator or user accesses the Democratic functionality, they will be affected by this stored XSS vulnerability. |
| Fuente | ⚠️ https:/ |
| Usuario | jiashenghe (UID 39445) |
| Sumisión | 2024-07-23 11:36 (hace 2 años) |
| Moderación | 2024-07-24 06:11 (19 hours later) |
| Estado | Duplicado |
| Entrada de VulDB | 272302 [ampache hasta 6.5.x Name secuencias de comandos en sitios cruzados] |
| Puntos | 0 |