| Título | westboy CicadasCMS 1.0 Cross Site Scripting |
|---|
| Descripción | In CicadasCMS v1.0, an attacker can construct input that contains malicious script that the browser will execute when another user accesses the affected page, resulting in a cross-site scripting (XSS) attack, due to insufficient input validation and output encoding of the user's content parameters. |
|---|
| Fuente | ⚠️ https://github.com/devastatingglamour/CVE/blob/main/CicadasCMS-XSS.md |
|---|
| Usuario | xmttz (UID 89920) |
|---|
| Sumisión | 2025-09-16 10:57 (hace 1 Año) |
|---|
| Moderación | 2025-09-26 14:08 (10 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 300625 [westboy CicadasCMS 1.0 /system/cms/content/save title/content/laiyuan secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 0 |
|---|