| 标题 | Stored Cross Site Scripting (XSS) exists in PluckCMS 4.7.18 |
|---|
| 描述 | The affected component is PluckCMS 4.7.18.
The environment can be downloaded at https://github.com/pluck-cms/pluck.
The Stored XSS is found in the installation of PluckCMS.
In the step 3 of installation, enter <script>alert('xss')</script> in the content and click save.
Go to the website and a prompt contains"xss" will show.
Stored XSS can cause Cookie leakage, damage the normal structure and style of the page, and redirect access to malicious websites. |
|---|
| 来源 | ⚠️ https://github.com/Jacky-Y/vuls/blob/main/vul3.md |
|---|
| 用户 | JackYu (UID 52658) |
|---|
| 提交 | 2023-09-06 04時13分 (3 年前) |
|---|
| 管理 | 2023-09-16 08時35分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 239854 [Pluck CMS 4.7.18 Installation install.php contents 跨网站脚本] |
|---|
| 积分 | 20 |
|---|