| Titolo | dreamer_cms <=4.1.3.1 storage-type XSS |
|---|
| Descrizione | A serious vulnerability was found in dreamer_cms. This vulnerability affects the file upload function of the UploadController.java file. A carefully crafted PDF file upload can lead to stored XSS. |
|---|
| Fonte | ⚠️ https://github.com/Hao-Ni/CVE/issues/5 |
|---|
| Utente | fatd0g (UID 84578) |
|---|
| Sottomissione | 10/05/2025 08:09 (1 Anno fa) |
|---|
| Moderazione | 24/05/2025 19:45 (14 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 248938 [Dreamer CMS 4.1.3 /upload/uploadFile file escalationi di privilegi] |
|---|
| Punti | 0 |
|---|