| 标题 | ruifang-tech Rebuild 3.8.6 Stored Cross Site Scripting |
|---|
| 描述 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Rebuild 3.8.6, within the project task description input functionality. Attackers can exploit this vulnerability by injecting malicious JavaScript or HTML payloads into task descriptions. The payload is executed whenever any project group members view an affected task. |
|---|
| 来源 | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskDescription.md |
|---|
| 用户 | vastzero (UID 78767) |
|---|
| 提交 | 2024-12-17 14時53分 (2 年前) |
|---|
| 管理 | 2024-12-27 20時31分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 289629 [ruifang-tech Rebuild 3.8.6 Project Tasks Section tasks description 跨网站脚本] |
|---|
| 积分 | 18 |
|---|