| Titre | 大漠急速开发 DMadmin Based on ThinkPhp 3.23 development version xss |
|---|
| Description | In the backend system settings, you can directly insert XSS POCs into any parameter input box. Submitted special characters will not be escaped or commented out and will be written to the database, leading to stored XSS. |
|---|
| La source | ⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE-2025-2-2.md |
|---|
| Utilisateur | Dee.Mirage (UID 71702) |
|---|
| Soumission | 05/12/2025 09:50 (il y a 10 mois) |
|---|
| Modérer | 15/12/2025 16:01 (10 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 336467 [vion707 DMadmin Backend AddonsController.class.php add cross site scripting] |
|---|
| Points | 17 |
|---|