| 标题 | https://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scripting |
|---|
| 描述 | Emlog Pro 2.2.10 /admin/tag.php exsits Stored XSS Vulnerability.XSS attacks can be used to steal sensitive information from users, such as session tokens, cookies, or personal data. Attackers can inject malicious scripts that send this information to their own servers, effectively compromising user accounts and privacy.In the Dice CMS system, it's possible to steal the administrator's cookie, thereby taking over the account. |
|---|
| 来源 | ⚠️ https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.md |
|---|
| 用户 | LIYU (UID 67244) |
|---|
| 提交 | 2024-04-07 04時24分 (3 年前) |
|---|
| 管理 | 2024-04-14 05時44分 (7 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 260603 [Emlog Pro 2.2.10 Post Tag /admin/tag.php 跨网站脚本] |
|---|
| 积分 | 19 |
|---|