提交 #311886: https://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scripting

Owl Admin System /admin-api/upload_image File Upload Lead to Stored XSS Vulnerability.Attacker can bypass file upload restrictions and cause files with malicious code to be uploaded.

• 来源: ⚠️ https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
• 用户: LIYU (UID 67244)
• 提交: 2024-04-07 11時38分 (3 年前)
• 管理: 2024-04-14 10時49分 (7 days later)
• 状态: 已接受
• VulDB条目: 260606 [slowlyo OwlAdmin 直到 3.5.7 Image File Upload /admin-api/upload_image file 跨网站脚本]
• 积分: 16