| शीर्षक | 南昌蓝智科技有限公司 Jspxcms 10.2.0 Cross-site scripting |
|---|
| विवरण | Jspxcms is a scalable, enterprise-class open source web content management system (CMS).
Jspxcms v10.2.0 has a cross-site scripting vulnerability due to unfiltered title and tag parameters in background survey selection, which can be exploited by an attacker to execute arbitrary Web scripts or HTML by injecting well-designed payloads. |
|---|
| स्रोत | ⚠️ https://github.com/sweatxi/BugHub/blob/main/jspXCMS-%20Survey%20label.pdf |
|---|
| उपयोगकर्ता | hexixi (UID 59932) |
|---|
| सबमिशन | 14/01/2024 11:37 AM (3 साल पहले) |
|---|
| संयम | 19/01/2024 10:40 AM (5 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 251545 [Jspxcms 10.2.0 Survey Label क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 18 |
|---|