Soumettre #574923: dreamer_cms <=4.1.3.1 storage-type XSSinformation

Titredreamer_cms <=4.1.3.1 storage-type XSS
DescriptionA serious vulnerability was found in dreamer_cms. This vulnerability affects the file upload function of the UploadController.java file. A carefully crafted PDF file upload can lead to stored XSS.
La source⚠️ https://github.com/Hao-Ni/CVE/issues/5
Utilisateur
 fatd0g (UID 84578)
Soumission10/05/2025 08:09 (il y a 1 Année)
Modérer24/05/2025 19:45 (14 days later)
StatutDupliqué
Entrée VulDB248938 [Dreamer CMS 4.1.3 /upload/uploadFile Fichier élévation de privilèges]
Points0

Do you need the next level of professionalism?

Upgrade your account now!