| Title | http://www.mrcms.cn/ mrcms 3.1.3 Stored Cross-Site Scripting |
|---|
| Description | The /admin/user/edit.do interface of mrcms_v3.1.3 has a storage XSS vulnerability, which can steal sensitive user information, tamper with page content, and spread malware for a long time, seriously threatening user privacy and website reputation. |
|---|
| Source | ⚠️ https://github.com/bdkuzma/vuln/issues/1 |
|---|
| User | baihekuz (UID 84516) |
|---|
| Submission | 04/22/2025 10:36 (11 months ago) |
|---|
| Moderation | 05/05/2025 14:14 (13 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 307399 [MRCMS 3.1.3 Edit User Page /admin/user/edit.do Username cross site scripting] |
|---|
| Points | 17 |
|---|