| 제목 | automad<=1.10.9 Stored Cross-Site Scripting(XSS) |
|---|
| 설명 | The system Client doesn't properly sanitise POST parameter, which result into a Stored Cross-Site Scripting(XSS).
1,After installing the program, log in to the background system, modify the website title and inject attack code, and then submit
2,Visiting the home page of the website will trigger the code
https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/automad%3C%3D1.10.9%20Stored%20Cross-Site%20Scripting(XSS).md |
|---|
| 원천 | ⚠️ https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/automad%3C%3D1.10.9%20Stored%20Cross-Site%20Scripting(XSS).md |
|---|
| 사용자 | webray.com.cn (UID 24778) |
|---|
| 제출 | 2022. 04. 29. AM 11:33 (4 연령 ago) |
|---|
| 모더레이션 | 2022. 04. 29. PM 02:06 (3 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 198706 [automad 까지 1.10.9 Dashboard title 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|