| 제목 | https://github.com/xnx3/wangmarket wangmarket 4.9 Improper Neutralization of Alternate XSS Syntax |
|---|
| 설명 | The /admin/system/variableSave.do interface in Warehouse version 4.9 has a stored XSS cross-site scripting vulnerability. Attackers can inject malicious JavaScript code into the system variables through this interface. This code is persistently stored in the database. When administrators or other users access the system variable list page, the malicious code will automatically execute in the victim's browser, thereby stealing cookies, hijacking sessions, or conducting other malicious operations. |
|---|
| 원천 | ⚠️ https://www.yuque.com/cocount-eveo/lu0220/eg6s9gropfwtoz9w?singleDoc#%20%E3%80%8AStored%20Cross-Site%20Scripting%E3%80%8B |
|---|
| 사용자 | eveo (UID 93828) |
|---|
| 제출 | 2025. 12. 26. AM 09:42 (10 개월 ago) |
|---|
| 모더레이션 | 2026. 01. 04. AM 09:47 (9 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 339484 [xnx3 wangmarket 까지 4.9 System Variables Page variableSave.do description 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|