Submeter #311808: https://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scriptinginformação

Títulohttps://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scripting
DescriçãoEmlog Pro 2.2.10 /admin/tag.php exsits Stored XSS Vulnerability.XSS attacks can be used to steal sensitive information from users, such as session tokens, cookies, or personal data. Attackers can inject malicious scripts that send this information to their own servers, effectively compromising user accounts and privacy.In the Dice CMS system, it's possible to steal the administrator's cookie, thereby taking over the account.
Fonte⚠️ https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.md
Utilizador
 LIYU (UID 67244)
Submissão07/04/2024 04h24 (há 3 anos)
Moderação14/04/2024 05h44 (7 days later)
EstadoAceite
Entrada VulDB260603 [Emlog Pro 2.2.10 Post Tag /admin/tag.php Script de Site Cruzado]
Pontos19

Do you know our Splunk app?

Download it now for free!