| Titolo | ruifang-tech Rebuild 3.8.6 Stored Cross Site Scripting |
|---|
| Descrizione | A Stored Cross-Site Scripting (XSS) vulnerability exists in Rebuild 3.8.6, within the project task description input functionality. Attackers can exploit this vulnerability by injecting malicious JavaScript or HTML payloads into task descriptions. The payload is executed whenever any project group members view an affected task. |
|---|
| Fonte | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskDescription.md |
|---|
| Utente | vastzero (UID 78767) |
|---|
| Sottomissione | 17/12/2024 14:53 (2 anni fa) |
|---|
| Moderazione | 27/12/2024 20:31 (10 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 289629 [ruifang-tech Rebuild 3.8.6 Project Tasks Section tasks Descrizione cross site scripting] |
|---|
| Punti | 18 |
|---|