| tiêu đề | https://gitee.com/qianfox/foxcms FoxCMS v1.2.16 Cross Site Scripting |
|---|
| Mô tả | A stored cross-site scripting (XSS) vulnerability exists in FoxCMS v1.2.16 that arises from the system not adequately filtering and escaping user-input data before it is stored on the server. An attacker can persistently store malicious code on the server by submitting malicious constructed script content. When other users visit a page containing this malicious content, the script will be executed in their browser, potentially leading to risks such as session hijacking, leakage of sensitive information (such as stealing cookies), malicious operation simulation, or tampering with page content. |
|---|
| Nguồn | ⚠️ https://github.com/21151213732/CVE/blob/main/FoxCMS-XSS2.md |
|---|
| Người dùng | xxllyy (UID 89360) |
|---|
| Đệ trình | 23/10/2025 03:08 (cách đây 11 các tháng) |
|---|
| Kiểm duyệt | 09/11/2025 07:34 (17 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 331640 [qianfox FoxCMS đến 1.2.16 Product.php add/edit title Tập lệnh chéo trang] |
|---|
| điểm | 20 |
|---|