Submeter #557385: Vendor JSite 1.0 Stored Cross-Site Scripting Attackinformação

TítuloVendor JSite 1.0 Stored Cross-Site Scripting Attack
DescriçãoVersion 1.0 of JSite /sys/office/save interface has a Cross-Site Scripting (XSS) vulnerability. Attackers can inject malicious JavaScript code through the remarks parameter.
Fonte⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/XSS2.md
Utilizador
 anshub (UID 30822)
Submissão14/04/2025 03h37 (há 1 Ano)
Moderação26/04/2025 09h14 (12 days later)
EstadoAceite
Entrada VulDB306306 [baseweb JSite até 1.0 /sys/office/save Comentário Script de Site Cruzado]
Pontos15

Interested in the pricing of exploits?

See the underground prices here!

n $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0'; } } ?>