| Название | emlog<=pro-1.2.2 Stored Cross-Site Scripting(XSS) |
|---|
| Описание | The system Client doesn't properly sanitise POST parameter, which result into a Stored Cross-Site Scripting(XSS).
1,Register your account on the website and sign in
2,Add articles and write attack code, and then submit
3,The super administrator will trigger the attack code when auditing the article
https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/emlog%3C=pro-1.2.2%20Stored%20Cross-Site%20Scripting(XSS).md |
|---|
| Источник | ⚠️ https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/emlog%3C=pro-1.2.2%20Stored%20Cross-Site%20Scripting(XSS).md |
|---|
| Пользователь | webray.com.cn (UID 24778) |
|---|
| Представление | 29.04.2022 08:57 (4 лет назад) |
|---|
| Модерация | 29.04.2022 09:28 (31 minutes later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 198705 [Emlog Pro до 1.2.2 POST Parameter межсайтовый скриптинг] |
|---|
| Баллы | 20 |
|---|