| Título | MCMS V5.5 xss |
|---|
| Descrição | During the security review of "MCMS System",I discovered a xss vulnerability in the "/mcms/search.do" .I found that in the MCmsAction class, the clearXss class is not perfect for the xss filtering statement, resulting in the ability to perform xss |
|---|
| Fonte | ⚠️ https://github.com/webzzaa/CVE-/issues/2 |
|---|
| Utilizador | Tom132432 (UID 85670) |
|---|
| Submissão | 29/05/2025 17h54 (há 1 Ano) |
|---|
| Moderação | 30/05/2025 12h48 (19 hours later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 215112 [Mingsoft MCMS 5.2.8 search.do content_title Script de Site Cruzado] |
|---|
| Pontos | 0 |
|---|