Invia #43294: Company Website CMS - /dashboard/contact 'phone' Stored Cross-Site Scripting(XSS)informazioni

TitoloCompany Website CMS - /dashboard/contact 'phone' Stored Cross-Site Scripting(XSS)
DescrizionePersistent XSS (or Stored XSS) attack is one of the three major categories of XSS attacks, the others being Non-Persistent (or Reflected) XSS and DOM-based XSS. In general, XSS attacks are based on the victim’s trust in a legitimate, but vulnerable, website or web application. Company Website CMS does not filter the content correctly at the parameter, resulting in the generation of stored XSS.
Fonte⚠️ https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS(XSS).md
Utente
 webray.com.cn (UID 24778)
Sottomissione10/08/2022 08:50 (4 anni fa)
Moderazione11/08/2022 11:06 (1 day later)
StatoAccettato
Voce VulDB206165 [SourceCodester Company Website CMS /dashboard/contact phone cross site scripting]
Punti19