제출 #499675: SeaCMS V13.3 Cross Site Scripting
| 제목 | SeaCMS V13.3 Cross Site Scripting |
|---|---|
| 설명 | See https://gitee.com/fushuling/cve/blob/master/SeaCMS%2013.2%20XSS%20.md for details SeaCMS 13.3 has a cross-site scripting (XSS) vulnerability. The root cause of this vulnerability is that some user input is not properly filtered and encoded, allowing malicious users to inject and execute malicious JavaScript code. Attackers can bypass input validation and output escape mechanisms by carefully constructing malicious scripts, inject malicious code into the page, and then execute it in the victim's browser. POC：url/js/player/dmplayer/player/index.php?next="</script><script>alert('xss')</script>"&nextdz=1 |
| 원천 | ⚠️ https:/ |
| 사용자 | fushuling (UID 45488) |
| 제출 | 2025. 02. 12. PM 04:08 (2 연령 ago) |
| 모더레이션 | 2025. 02. 21. PM 04:10 (9 days later) |
| 상태 | 중복 |
| VulDB 항목 | 272577 [SeaCMS 12.9 index.php color/vid/url 크로스 사이트 스크립팅] |
| 포인트들 | 0 |