提出 #311808: https://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scripting情報

タイトルhttps://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scripting
説明Emlog Pro 2.2.10 /admin/tag.php exsits Stored XSS Vulnerability.XSS attacks can be used to steal sensitive information from users, such as session tokens, cookies, or personal data. Attackers can inject malicious scripts that send this information to their own servers, effectively compromising user accounts and privacy.In the Dice CMS system, it's possible to steal the administrator's cookie, thereby taking over the account.
ソース⚠️ https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.md
ユーザー
 LIYU (UID 67244)
送信2024年04月07日 04:24 (3 年 ago)
モデレーション2024年04月14日 05:44 (7 days later)
ステータス承諾済み
VulDBエントリ260603 [Emlog Pro 2.2.10 Post Tag /admin/tag.php クロスサイトスクリプティング]
ポイント19

Do you need the next level of professionalism?

Upgrade your account now!