| शीर्षक | YiFang CMS 2.0.5 Cross Site Scripting on app/db/admin/D_friendLink.php |
|---|
| विवरण | A cross-site scripting (XSS) vulnerability exists in the linkName parameter of the /admin/friendLink interface in the extended management module of yifangCMS version 2.0.5. This stored XSS vulnerability arises because the linkName field is directly stored in the database without any filtering in the update() method of app/db/admin/D_friendLink.php. An attacker can submit malicious XSS scripts and trigger the XSS vulnerability when accessing friend links. |
|---|
| स्रोत | ⚠️ https://github.com/ZZCTD/CVE/issues/6 |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 25/02/2026 11:30 AM (7 महीनों पहले) |
|---|
| संयम | 07/03/2026 09:12 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 349719 [YiFang CMS 2.0.5 D_friendLink.php update linkName क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|