| Название | baidu UEditor v1.4.2 Cross Site Scripting |
|---|
| Описание | A reflected cross-site scripting (XSS) vulnerability has been identified in the UEditor 1.4.2. This vulnerability permits an attacker to inject malicious scripts into web pages viewed by users, potentially compromising user data and session integrity. |
|---|
| Источник | ⚠️ https://github.com/Hebing123/cve/issues/63 |
|---|
| Пользователь | jiashenghe (UID 39445) |
|---|
| Представление | 25.07.2024 13:47 (2 лет назад) |
|---|
| Модерация | 31.07.2024 17:14 (6 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 273274 [Baidu UEditor 1.4.2 controller.php?action=catchimage source[] межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|