Submeter #311886: https://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scriptinginformação

Títulohttps://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scripting
DescriçãoOwl Admin System /admin-api/upload_image File Upload Lead to Stored XSS Vulnerability.Attacker can bypass file upload restrictions and cause files with malicious code to be uploaded.
Fonte⚠️ https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
Utilizador
 LIYU (UID 67244)
Submissão07/04/2024 11h38 (há 3 anos)
Moderação14/04/2024 10h49 (7 days later)
EstadoAceite
Entrada VulDB260606 [slowlyo OwlAdmin até 3.5.7 Image File Upload /admin-api/upload_image file Script de Site Cruzado]
Pontos16

Do you need the next level of professionalism?

Upgrade your account now!