| शीर्षक | DaiCuoCms DaiCuoCms article manage system 1.3.13 Cross Site Scripting |
|---|
| विवरण | DaiCuoCms version 1.3.13 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability. An authenticated user with access to the admin panel can inject malicious JavaScript code into article content or other editable fields. This code is then rendered and executed in the context of users who visit the affected frontend pages, potentially leading to session hijacking, phishing, or other malicious actions. The lack of proper input sanitization and output encoding makes this vulnerability exploitable. |
|---|
| स्रोत | ⚠️ https://github.com/daicuo/cms/issues/1 |
|---|
| उपयोगकर्ता | A13niL (UID 83935) |
|---|
| सबमिशन | 09/04/2025 08:25 AM (1 वर्ष पहले) |
|---|
| संयम | 18/04/2025 04:00 PM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 305648 [DaiCuo 1.3.13 SEO Optimization Settings Section क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|