| Titre | MCMS V5.5 xss |
|---|
| Description | During the security review of "MCMS System",I discovered a xss vulnerability in the "/mcms/search.do" .I found that in the MCmsAction class, the clearXss class is not perfect for the xss filtering statement, resulting in the ability to perform xss |
|---|
| La source | ⚠️ https://github.com/webzzaa/CVE-/issues/2 |
|---|
| Utilisateur | Tom132432 (UID 85670) |
|---|
| Soumission | 29/05/2025 17:54 (il y a 1 Année) |
|---|
| Modérer | 30/05/2025 12:48 (19 hours later) |
|---|
| Statut | Dupliqué |
|---|
| Entrée VulDB | 215112 [Mingsoft MCMS 5.2.8 search.do content_title cross site scripting] |
|---|
| Points | 0 |
|---|