提交 #514959: StarSea99 starsea-mall V1.0.0 Cross Site Scripting信息

标题StarSea99 starsea-mall V1.0.0 Cross Site Scripting
描述The system backend /admin/indexConfigs/update interface does not filter the redirectUrl parameter, allowingattackers to insert malicious JS files and create XSS vulnerabilities
来源⚠️ https://github.com/ExecX/security/blob/main/222.md
用户
 ExecX (UID 81447)
提交2025-03-05 13時55分 (2 年前)
管理2025-03-07 07時13分 (2 days later)
状态已接受
VulDB条目298900 [StarSea99 starsea-mall 1.0 update redirectUrl 跨网站脚本]
积分15

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!