| 标题 | automad<=1.10.9 Stored Cross-Site Scripting(XSS) |
|---|
| 描述 | The system Client doesn't properly sanitise POST parameter, which result into a Stored Cross-Site Scripting(XSS).
1,After installing the program, log in to the background system, modify the website title and inject attack code, and then submit
2,Visiting the home page of the website will trigger the code
https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/automad%3C%3D1.10.9%20Stored%20Cross-Site%20Scripting(XSS).md |
|---|
| 来源 | ⚠️ https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/automad%3C%3D1.10.9%20Stored%20Cross-Site%20Scripting(XSS).md |
|---|
| 用户 | webray.com.cn (UID 24778) |
|---|
| 提交 | 2022-04-29 11時33分 (4 年前) |
|---|
| 管理 | 2022-04-29 14時06分 (3 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 198706 [automad 直到 1.10.9 Dashboard title 跨网站脚本] |
|---|
| 积分 | 20 |
|---|