| शीर्षक | diem-project diem 116974edfb9a5b8bd69cb13586dc62bcdbb485ad Cross Site Scripting |
|---|
| विवरण | The Link Widget accepts its `text` field as an unrestricted `sfValidatorString` in `dmFrontPlugin/lib/dmWidget/link/dmWidgetContentLinkForm.php`. Its view in `dmWidgetContentLinkView.php` applies `nl2br()` and passes the result to `dmBaseLinkTag::text()`. `dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php` inserts the value directly between `<a>` tags without HTML encoding. A user with the `widget_edit_fast` or `widget_edit` credential can persist markup such as `<img src=x onerror=alert(document.domain)>`, which executes for every visitor who loads a page containing that widget. |
|---|
| स्रोत | ⚠️ https://github.com/diem-project/diem/issues/459 |
|---|
| उपयोगकर्ता | cnluminous (UID 98136) |
|---|
| सबमिशन | 30/09/2026 06:07 PM (19 दिन पहले) |
|---|
| संयम | 18/10/2026 11:52 AM (18 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 421690 [diem-project diem तक 116974edfb9a5b8bd69cb13586dc62bcdbb485ad dmWidget dmBaseLinkTag.php dmBaseLinkTag::text क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|