Submit #411202: kalvinGit CMS 2021-09-09 Doubled Character XSS Manipulationsinfo

TitlekalvinGit CMS 2021-09-09 Doubled Character XSS Manipulations
DescriptionA severe vulnerability has been discovered in kvf-admin, where file uploads can lead to the ability to read files and there exists a stored XSS vulnerability.
Source⚠️ https://github.com/daxiangya/kvf-admin/issues/1
User
 vientiane (UID 75134)
Submission09/19/2024 13:54 (2 years ago)
Moderation09/27/2024 18:08 (8 days later)
StatusAccepted
VulDB entry278784 [kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff XML File config.json&action=uploadfile upfile cross site scripting]
Points15

Do you want to use VulDB in your project?

Use the official API to access entries easily!