| Título | CesiumGS Cesium <=1.137.0 Cross-Site Scripting |
|---|
| Descripción | Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sandcastle standalone demo viewer. An attacker can craft a malicious URL containing a specially encoded payload that executes arbitrary JavaScript code in the victim's browser context. |
|---|
| Fuente | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/18 |
|---|
| Usuario | Ana10gy (UID 93358) |
|---|
| Sumisión | 2026-03-01 00:14 (hace 6 meses) |
|---|
| Moderación | 2026-03-11 17:49 (11 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 350473 [CesiumGS CesiumJS hasta 1.137.0 standalone.html c secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 16 |
|---|