提交 #372309: formtools.org formtools 3.1.1 xss信息

标题formtools.org formtools 3.1.1 xss
描述 Download Source Code:https://github.com/formtools/core Step:Log in to the admin account and visit the "/admin/forms/add/step2.php?submission_type=direct". In the "Form URL" field, use the following POC: '"><script>alert("xss");</script>'. After clicking Next, refresh the page to complete the stored XSS attack.
来源⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE-2.md
用户
 Dee.Mirage (UID 71702)
提交2024-07-10 16時33分 (2 年前)
管理2024-07-20 08時11分 (10 days later)
状态已接受
VulDB条目271989 [formtools.org Form Tools 3.1.1 step2.php?submission_type=direct Form URL 跨网站脚本]
积分19

Want to know what is going to be exploited?

We predict KEV entries!