| शीर्षक | CMS Made Simple(https://www.cmsmadesimple.org/) CMS Made Simple V2.2.18 Stored XSS |
|---|
| विवरण | Login to the administrator background, in the Site Admin section, you can edit "Settings - News module",then Add Category,in this step, you can input a attact vector as Name value:
`<svg><animate attributename="x" dur="1s" onbegin="alert(1)"></animate></svg>` |
|---|
| स्रोत | ⚠️ https://github.com/t34t/CVE/blob/main/CMSMS/1-Stored-XSS-Vulnerability-in-CMS-Made-Simple-V2.2.18.md |
|---|
| उपयोगकर्ता | testvul (UID 58141) |
|---|
| सबमिशन | 16/11/2023 12:53 PM (3 साल पहले) |
|---|
| संयम | 18/11/2023 10:29 AM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 132438 [CMS Made Simple 2.2.10 News moduleinterface.php Name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|