| शीर्षक | forest forest <= 0.0.5 Improper Neutralization of Alternate XSS Syntax |
|---|
| विवरण | Forest <= 0.0.5 contains a stored XSS vulnerability in the user profile update functionality. The signature fields are not sanitized before storage, allowing authenticated attackers to inject malicious JavaScript code that executes when other users view the attacker's profile. |
|---|
| स्रोत | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/MBymdGpuFoGQYuxEiH2cdC5BnSe?from=from_copylink |
|---|
| उपयोगकर्ता | xcxr (UID 86629) |
|---|
| सबमिशन | 10/02/2026 04:37 AM (8 महीनों पहले) |
|---|
| संयम | 21/02/2026 06:42 PM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 347317 [rymcu forest तक 0.0.5 User Profile UserInfoController.java updateUserInfo क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 18 |
|---|