| 제목 | ZHENFENG13 https://github.com/ZHENFENG13/My-Blog <=1.0.0 Stored XSS |
|---|
| 설명 | The endpoint /admin/blog/save does not perform strict validation on user-controlled input, thus allowing attackers to insert malicious code into the database. When outputting content at the endpoint /admin/tags, no encoding is performed either, resulting in a stored XSS vulnerability.
Additionally, this application has no CSRF protection, enabling attackers to exploit CSRF to trick admin users into adding tag names containing malicious code. |
|---|
| 원천 | ⚠️ https://github.com/ZHENFENG13/My-Blog/issues/148 |
|---|
| 사용자 | ZAST.AI (UID 87884) |
|---|
| 제출 | 2025. 08. 04. AM 09:06 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 08. 17. PM 04:05 (13 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 227812 [zhenfeng13 My-Blog Blog Management Page title 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|