| 제목 | CMSeasy V7 Cross Site Scripting |
|---|
| 설명 | During a security assessment of Cmseasy, a critical Cross-site Scripting (XSS) vulnerability was discovered in the lib/inc/view.php file. This vulnerability is attributed to the insufficient output encoding of user-supplied input for the PHP_SELF parameter. This allows attackers to inject malicious client-side scripts. When other users visit the page containing the malicious script, it executes within their browser, potentially leading to session hijacking, data theft, or page defacement. Immediate corrective action is essential to safeguard the system and its users. |
|---|
| 원천 | ⚠️ https://github.com/tiancesec/CVE/issues/5 |
|---|
| 사용자 | tiancesec (UID 90883) |
|---|
| 제출 | 2025. 09. 28. AM 10:51 (8 개월 ago) |
|---|
| 모더레이션 | 2025. 10. 05. PM 05:35 (7 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 327215 [CmsEasy 까지 7.7.7 URL lib/inc/view.php PHP_SELF 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|