Invia #380151: baidu UEditor v1.4.2 Cross Site Scriptinginformazioni

Titolobaidu UEditor v1.4.2 Cross Site Scripting
DescrizioneA reflected cross-site scripting (XSS) vulnerability has been identified in the UEditor 1.4.2. This vulnerability permits an attacker to inject malicious scripts into web pages viewed by users, potentially compromising user data and session integrity.
Fonte⚠️ https://github.com/Hebing123/cve/issues/63
Utente
 jiashenghe (UID 39445)
Sottomissione25/07/2024 13:47 (2 anni fa)
Moderazione31/07/2024 17:14 (6 days later)
StatoAccettato
Voce VulDB273274 [Baidu UEditor 1.4.2 controller.php?action=catchimage source[] cross site scripting]
Punti17

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!