| 제목 | paicoding Latest version as of 2026.02.12 Improper Neutralization of Alternate XSS Syntax |
|---|
| 설명 | PaiCoding application contains a stored XSS vulnerability in the article publishing functionality. The article content field is not sanitized before storage, allowing authenticated attackers to inject malicious JavaScript code that executes when other users view the article. This vulnerability affects all users who view the malicious article, including admin. |
|---|
| 원천 | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/AGJpd5u3hoMcpZxaojccf9J0nZd?from=from_copylink |
|---|
| 사용자 | xcxr (UID 86629) |
|---|
| 제출 | 2026. 02. 12. AM 09:36 (8 개월 ago) |
|---|
| 모더레이션 | 2026. 02. 23. PM 05:39 (11 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 306301 [itwanger paicoding 1.0.3 /article/app/post content 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|