| Название | long2ice fastapi-admin 0.1.4 Cross Site Scripting (XSS) |
|---|
| Описание | A stored XSS vulnerability was discovered in the Category module of FastAPI-Admin. Malicious JavaScript code injected into a form field (e.g. Category Name) is stored in the backend and rendered without proper sanitization. When an admin or any user visits the category list or detail view, the script executes in their browser context. |
|---|
| Источник | ⚠️ https://github.com/fastapi-admin/fastapi-admin/issues/182 |
|---|
| Пользователь | hacker_rootki (UID 84361) |
|---|
| Представление | 17.04.2025 20:39 (1 Год назад) |
|---|
| Модерация | 01.05.2025 14:21 (14 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 275850 [fastapi-admin 0.1.4 Create Product Product Name межсайтовый скриптинг] |
|---|
| Баллы | 0 |
|---|