| Titolo | MCMS V5.5 xss |
|---|
| Descrizione | During the security review of "MCMS System",I discovered a xss vulnerability in the "/mcms/search.do" .I found that in the MCmsAction class, the clearXss class is not perfect for the xss filtering statement, resulting in the ability to perform xss |
|---|
| Fonte | ⚠️ https://github.com/webzzaa/CVE-/issues/2 |
|---|
| Utente | Tom132432 (UID 85670) |
|---|
| Sottomissione | 29/05/2025 17:54 (1 Anno fa) |
|---|
| Moderazione | 30/05/2025 12:48 (19 hours later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 215112 [Mingsoft MCMS 5.2.8 search.do content_title cross site scripting] |
|---|
| Punti | 0 |
|---|