| 标题 | DedeBIZ DedeBIZ 6.3.0 Stored Cross-Site Scripting |
|---|
| 描述 | There is a stored XSS vulnerability in dedebiz 6.3.0. By modifying the website copyright information in the administrator backend site settings and inserting a malicious payload, arbitrary JS code can be executed. The corresponding source code can be downloaded from the official website: https://www.dedebiz.com/download |
|---|
| 来源 | ⚠️ https://github.com/JTZ-a/SRC/blob/master/DedeBIZ/DedeBIZ%20-%20StoredXSS/README.md |
|---|
| 用户 | JTZ- (UID 59232) |
|---|
| 提交 | 2024-01-07 10時52分 (3 年前) |
|---|
| 管理 | 2024-01-15 10時13分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 250725 [DedeBIZ 6.3.0 Website Copyright Setting 跨网站脚本] |
|---|
| 积分 | 18 |
|---|