提交 #514960: StarSea99 starsea-mall V1.0.0 Cross Site Scripting
| 标题 | StarSea99 starsea-mall V1.0.0 Cross Site Scripting |
|---|---|
| 描述 | The system backend /admin/goods/update interface does not filter the goodsIntro and goodsName parameters, allowing attackers to insert malicious JS files and create XSS vulnerabilities image |
| 来源 | ⚠️ https:/ |
| 用户 | ExecX (UID 81447) |
| 提交 | 2025-03-05 13時56分 (2 年前) |
| 管理 | 2025-03-07 07時13分 (2 days later) |
| 状态 | 已接受 |
| VulDB条目 | 298901 [StarSea99 starsea-mall 1.0 /admin/goods/update goodsName 跨网站脚本] |
| 积分 | 16 |