| शीर्षक | https://gitee.com/westboy/CicadasCMS/branches CicadasCMS v1.0 Cross Site Scripting |
|---|
| विवरण | A stored cross-site scripting (XSS) vulnerability exists in CicadasCMS v1.0 that arises from the system not adequately filtering and escaping user input data before it is stored on the server. Attackers can persistently store malicious code on the server by submitting malicious script content (system administration - template management). When other users access pages containing malicious content, the script will be executed in their browsers, which may lead to risks such as session hijacking, sensitive information leakage (such as stolen cookies), malicious operation simulation, or page content tampering |
|---|
| स्रोत | ⚠️ https://github.com/devastatingglamour/CVE/blob/main/CicadasCMS-XSS4.md |
|---|
| उपयोगकर्ता | xmttz (UID 89920) |
|---|
| सबमिशन | 22/09/2025 07:41 AM (1 वर्ष पहले) |
|---|
| संयम | 04/10/2025 08:25 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 327170 [westboy CicadasCMS तक 2431154dac8d0735e04f1fd2a3c3556668fc8dab Template Management Page TemplateFileServiceImpl.java save क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|