जमा करें #641127: mrvautin https://github.com/mrvautin/expressCart <=1.0.0 Frame Injectionजानकारी

शीर्षकmrvautin https://github.com/mrvautin/expressCart <=1.0.0 Frame Injection
विवरणUser-controlled img src allows loading untrusted frames, enabling internal service probe & info gathering, content manipulation within trusted contexts.
स्रोत⚠️ https://github.com/mrvautin/expressCart/issues/288
उपयोगकर्ता
 ZAST.AI (UID 87884)
सबमिशन25/08/2025 12:43 PM (1 वर्ष पहले)
संयम01/09/2025 01:45 PM (7 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि322112 [mrvautin expressCart तक b31302f4e99c3293bd742c6d076a721e168118b0 Edit Product Page /admin/product/edit/ अधिकार वृद्धि]
अंक15

Want to know what is going to be exploited?

We predict KEV entries!