| Название | ClassCMS V4.8 Basic Cross Site Scripting |
|---|
| Описание | A stored XSS vulnerability exists in the model management module of Classcms. Attackers can inject malicious scripts, which are stored in the system. These scripts are executed when other users access the affected page, potentially leading to the execution of harmful code. |
|---|
| Источник | ⚠️ https://github.com/Jack-Black-13/blob/blob/main/classCMS_v4.8_model_xss.md |
|---|
| Пользователь | vulbox (UID 78949) |
|---|
| Представление | 11.12.2024 12:51 (2 лет назад) |
|---|
| Модерация | 11.12.2024 14:08 (1 hour later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 287875 [ClassCMS 4.8 Model Management Page /index.php/admin URL межсайтовый скриптинг] |
|---|
| Баллы | 17 |
|---|