| Título | 长沙友点软件科技有限公司 YouDianCMS 9.5.21 Cross Site Scripting |
|---|
| Descripción | YouDianCMS v9.5.21 has a reflected XSS vulnerability in App/Tpl/Admin/Default/Channel/index.html.Attackers can add malicious JavaScript scripts to the URL, and the server will concatenate the malicious scripts into the URL and return them to the browser, ultimately causing XSS vulnerabilities |
|---|
| Fuente | ⚠️ https://github.com/zonesec0/findcve/issues/7 |
|---|
| Usuario | zonesec (UID 74980) |
|---|
| Sumisión | 2025-03-26 07:15 (hace 1 Año) |
|---|
| Moderación | 2025-04-12 13:48 (17 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 304571 [YouDianCMS 9.5.21 index.html.Attackers Parent secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 17 |
|---|