| Titre | ChestnutCMS v1.5.2 Stored XSS |
|---|
| Description | The /cms/file/upload interface of ChestnutCMS v1.5.2 has a stored XSS vulnerability. Attackers can upload carefully crafted HTML or PDF files to induce administrators to access them, thereby stealing the administrator's login credentials. |
|---|
| La source | ⚠️ https://github.com/IceFoxH/VULN/issues/6 |
|---|
| Utilisateur | icefoxh (UID 82165) |
|---|
| Soumission | 01/03/2025 09:45 (il y a 2 ans) |
|---|
| Modérer | 06/03/2025 09:55 (5 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 298773 [ChestnutCMS jusqu’à 1.5.2 /dev-api/cms/file/upload uploadFile file élévation de privilèges] |
|---|
| Points | 16 |
|---|