जमा करें #239424: CMS Made Simple(https://www.cmsmadesimple.org/) CMS Made Simple V2.2.18 Stored XSSजानकारी

शीर्षकCMS Made Simple(https://www.cmsmadesimple.org/) CMS Made Simple V2.2.18 Stored XSS
विवरणLogin to the administrator background, in the Site Admin section, you can edit "Setting - Global Settings",in Global Metadata section,you can input a attact vector: <svg><animate attributename="x" dur="1s" onbegin="alert('a')"></animate></svg>
स्रोत⚠️ https://github.com/t34t/CVE/blob/main/CMSMS/0-Stored-XSS-Vulnerability-in-CMS-Made-Simple-V2.2.18.md
उपयोगकर्ता testvul (UID 58141)
सबमिशन16/11/2023 12:17 PM (3 साल पहले)
संयम18/11/2023 10:29 AM (2 days later)
स्थितिप्रतिलिपि
VulDB प्रविष्टि116107 [CMS Made Simple 2.2.7 admin/siteprefs.php metadata संग्रहीत क्रॉस साइट स्क्रिप्टिंग]
अंक0

Interested in the pricing of exploits?

See the underground prices here!