| 标题 | PHPVibe 11.0.46 Cross Site Scripting |
|---|
| 描述 | A vulnerability classified as severe has been discovered in PHPVibe.This will affect the unknown part of the file functionalities.global.php.
Directly outputting unfiltered user's input parameter "site-logo-text" into HTML code can lead to cross site scripting vulnerabilities. |
|---|
| 来源 | ⚠️ https://github.com/WeikFu/PHPVibe-vulnerability-description/issues/1 |
|---|
| 用户 | weikang fu (UID 70226) |
|---|
| 提交 | 2024-06-10 17時12分 (2 年前) |
|---|
| 管理 | 2024-06-17 19時13分 (7 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 268823 [PHPVibe 11.0.46 Global Options Page functionalities.global.php site-logo-text 跨网站脚本] |
|---|
| 积分 | 17 |
|---|