| 제목 | https://github.com/huanzi-qch/base-admin base-admin 1.0 Cross Site Scripting |
|---|
| 설명 | Base Admin is a simple and versatile back-end management system. In the master version of the system, the user input parameters for the add user function point are not filtered or encoded, and are directly output to the page, resulting in a storage-based XSS vulnerability. An attacker can submit data by constructing request parameters containing malicious scripts. Once the scripts are stored in the database, they will be automatically executed when other users access the relevant page, which can steal user session information or carry out phishing attacks. |
|---|
| 원천 | ⚠️ https://github.com/jac40577-art/cve-db/blob/master/BaseAdminSystem%20-%20Introduction_to_Storage-Based_XSS_Vulnerability.md |
|---|
| 사용자 | Jacinta (UID 99758) |
|---|
| 제출 | 2026. 07. 26. PM 12:05 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 23. PM 07:02 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 409062 [huanzi-qch base-admin 까지 52816b760cd53244989fd664bbb2b3d4edbfdbf1 Add User CommonController.java save 사용자 이름 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|