| शीर्षक | olivier-ls PHP-FTS 0.1 Cross-Site Scripting |
|---|
| विवरण | PHP-FTS (ols/php-fts) before an unreleased fix does not HTML-escape document field values in `SearchEngine::buildHighlights()` before wrapping matched words in HTML highlight tags. The `search($query, highlight: true)` path splits field values into words and concatenates matched words as `$openTag . $word . $closeTag` (default `<mark>...</mark>`) with no `htmlspecialchars()`. When an application indexes attacker-influenced content and renders the returned highlights as HTML, an attacker can inject arbitrary markup (e.g. an `<img src=x onerror=alert(document.cookie)>` payload) that executes in the browser of users viewing search results, leading to stored cross-site scripting (session/cookie theft, account takeover).
Reproduction: https://github.com/sumo166/CVE-apply/blob/main/olivier-ls/php-fts/SearchEngine%20buildHighlights%20Stored%20XSS%20(CWE-79)_cve.md |
|---|
| स्रोत | ⚠️ https://github.com/olivier-ls/php-fts/issues/1 |
|---|
| उपयोगकर्ता | summmm (UID 69690) |
|---|
| सबमिशन | 23/08/2026 07:52 AM (28 दिन पहले) |
|---|
| संयम | 19/09/2026 11:01 AM (27 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 407915 [olivier-ls PHP-FTS तक 1.1.2 Search Engine src/SearchEngine.php buildHighlights प्रश्न क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|