| Название | CMS Made Simple(https://www.cmsmadesimple.org/) CMS Made Simple V2.2.18 Stored XSS |
|---|
| Описание | Login to the administrator background, in the My Preferences section, you can edit "Manager Shortcuts"->"Add Shortcut",,in this step, you can input a attact vector as shortcut name value:
"</a><svg><animate attributename="x" dur="1s" onbegin="alert(1)"></animate></svg> |
|---|
| Источник | ⚠️ https://github.com/t34t/CVE/blob/main/CMSMS/2-Stored-XSS-Vulnerability-in-CMS-Made-Simple-V2.2.18.md |
|---|
| Пользователь | testvul (UID 58141) |
|---|
| Представление | 16.11.2023 12:53 (3 лет назад) |
|---|
| Модерация | 18.11.2023 10:29 (2 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 54957 [CMS Made Simple до 1.5.1 межсайтовый скриптинг] |
|---|
| Баллы | 0 |
|---|