जमा करें #239326: CSZCMS(https://www.cszcms.com/) CSZCMS V1.3.0 Stored XSSजानकारी

शीर्षकCSZCMS(https://www.cszcms.com/) CSZCMS V1.3.0 Stored XSS
विवरणIn the administration background, when performing website configuration, the Additional Meta Tag section is not strictly filtered, and the running user inserts svg tags to execute code, resulting in a stored XSS vulnerability
स्रोत⚠️ https://github.com/t34t/CVE/blob/main/CSZCMS/0-Store-XSS-Vulnerability-in-cszcmsV1.3.0.md
उपयोगकर्ता testvul (UID 58141)
सबमिशन16/11/2023 10:05 AM (3 साल पहले)
संयम26/11/2023 08:45 AM (10 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि246129 [CSZCMS 1.3.0 Site Settings Page /admin/settings/ Additional Meta Tag क्रॉस साइट स्क्रिप्टिंग]
अंक16