제출 #514958: StarSea99 starsea-mall V1.0.0 Cross Site Scripting정보

제목StarSea99 starsea-mall V1.0.0 Cross Site Scripting
설명The system backend /admin/carousels/save interface does not filter the redirectUrl parameter, allowing attackers to insert malicious JS files and create XSS vulnerabilities
원천⚠️ https://github.com/ExecX/security/blob/main/111.md
사용자
 ExecX (UID 81447)
제출2025. 03. 05. PM 01:54 (2 연령 ago)
모더레이션2025. 03. 07. AM 07:13 (2 days later)
상태수락
VulDB 항목298899 [StarSea99 starsea-mall 1.0 /admin/carousels/save redirectUrl 크로스 사이트 스크립팅]
포인트들15

◂ 이전개요다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!