| शीर्षक | GitHub EasyImages2.0 <=V2.8.6 Improper Neutralization of Alternate XSS Syntax |
|---|
| विवरण | EasyImages supports multi file upload, simple without database, and returns image url, markdown, bbscode, html, a graphic bed program demo address: https://png.cm/ The graph bed program that has been used before is: PHP multi graph long distance transmission program 2.4.3. Due to its old version and false upload, under the trend of the current popularity of html5, it uses basic knowledge to write a new one with html5 as the default upload and supports flash, which is downward compatible to IE9. This project has an XSS vulnerability, which can be used by attackers to obtain sensitive information. |
|---|
| स्रोत | ⚠️ https://github.com/icret/EasyImages2.0/issues/260 |
|---|
| उपयोगकर्ता | naixiao (UID 92174) |
|---|
| सबमिशन | 12/11/2025 08:54 AM (11 महीनों पहले) |
|---|
| संयम | 19/11/2025 03:41 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 332940 [icret EasyImages तक 2.8.6 SVG Image /app/upload.php file क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|