Отправить #563534: http://www.mrcms.cn/ mrcms 3.1.3 Stored Cross-Site ScriptingИнформация

Названиеhttp://www.mrcms.cn/ mrcms 3.1.3 Stored Cross-Site Scripting
ОписаниеThe /admin/group/edit.do interface of mrcms_v3.1.3 has a storage XSS vulnerability, which can steal sensitive user information, tamper with page content, 和 spread malware for a long time, seriously threatening user privacy and website reputation.
Источник⚠️ https://github.com/bdkuzma/vuln/issues/2
Пользователь
 baihekuz (UID 84516)
Представление22.04.2025 10:43 (11 месяцы назад)
Модерация05.05.2025 14:14 (13 days later)
Статуспринято
Запись VulDB307400 [MRCMS 3.1.3 Group Edit Page /admin/group/edit.do межсайтовый скриптинг]
Баллы17