Invia #311886: https://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scriptinginformazioni

Titolohttps://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scripting
DescrizioneOwl Admin System /admin-api/upload_image File Upload Lead to Stored XSS Vulnerability.Attacker can bypass file upload restrictions and cause files with malicious code to be uploaded.
Fonte⚠️ https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
Utente
 LIYU (UID 67244)
Sottomissione07/04/2024 11:38 (3 anni fa)
Moderazione14/04/2024 10:49 (7 days later)
StatoAccettato
Voce VulDB260606 [slowlyo OwlAdmin fino a 3.5.7 Image File Upload /admin-api/upload_image file cross site scripting]
Punti16

Want to stay up to date on a daily basis?

Enable the mail alert feature now!