| Titre | formtools.org formtools 3.1.1 xss |
|---|
| Description | Download Source Code：https://github.com/formtools/core
Step：Log in to the admin account and visit the "/admin/forms/add/step2.php?submission_type=direct". In the "Form URL" field, use the following POC: '"><script>alert("xss");</script>'. After clicking Next, refresh the page to complete the stored XSS attack. |
|---|
| La source | ⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE-2.md |
|---|
| Utilisateur | Dee.Mirage (UID 71702) |
|---|
| Soumission | 10/07/2024 16:33 (il y a 2 ans) |
|---|
| Modérer | 20/07/2024 08:11 (10 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 271989 [formtools.org Form Tools 3.1.1 step2.php?submission_type=direct Form URL cross site scripting] |
|---|
| Points | 19 |
|---|