| Title | ChestnutCMS v1.5.2 Stored XSS |
|---|
| Description | The /cms/file/upload interface of ChestnutCMS v1.5.2 has a stored XSS vulnerability. Attackers can upload carefully crafted HTML or PDF files to induce administrators to access them, thereby stealing the administrator's login credentials. |
|---|
| Source | ⚠️ https://github.com/IceFoxH/VULN/issues/6 |
|---|
| User | icefoxh (UID 82165) |
|---|
| Submission | 03/01/2025 09:45 (1 Year ago) |
|---|
| Moderation | 03/06/2025 09:55 (5 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 298773 [ChestnutCMS up to 1.5.2 /dev-api/cms/file/upload uploadFile unrestricted upload] |
|---|
| Points | 16 |
|---|