Invia #311808: https://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scriptinginformazioni

Titolohttps://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scripting
DescrizioneEmlog Pro 2.2.10 /admin/tag.php exsits Stored XSS Vulnerability.XSS attacks can be used to steal sensitive information from users, such as session tokens, cookies, or personal data. Attackers can inject malicious scripts that send this information to their own servers, effectively compromising user accounts and privacy.In the Dice CMS system, it's possible to steal the administrator's cookie, thereby taking over the account.
Fonte⚠️ https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.md
Utente
 LIYU (UID 67244)
Sottomissione07/04/2024 04:24 (3 anni fa)
Moderazione14/04/2024 05:44 (7 days later)
StatoAccettato
Voce VulDB260603 [Emlog Pro 2.2.10 Post Tag /admin/tag.php cross site scripting]
Punti19

Do you want to use VulDB in your project?

Use the official API to access entries easily!