| Titolo | ChestnutCMS v1.5.2 Stored XSS |
|---|
| Descrizione | The /cms/file/upload interface of ChestnutCMS v1.5.2 has a stored XSS vulnerability. Attackers can upload carefully crafted HTML or PDF files to induce administrators to access them, thereby stealing the administrator's login credentials. |
|---|
| Fonte | ⚠️ https://github.com/IceFoxH/VULN/issues/6 |
|---|
| Utente | icefoxh (UID 82165) |
|---|
| Sottomissione | 01/03/2025 09:45 (1 Anno fa) |
|---|
| Moderazione | 06/03/2025 09:55 (5 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 298773 [ChestnutCMS fino a 1.5.2 /dev-api/cms/file/upload uploadFile escalationi di privilegi] |
|---|
| Punti | 16 |
|---|