| 标题 | 长沙友点软件科技有限公司 YouDianCMS 9.5.21 Cross Site Scripting |
|---|
| 描述 | YouDianCMS v9.5.21 has another reflected XSS vulnerability in App/Tpl/Admin/Default/Log/index.html.Attackers can add malicious JavaScript scripts to the URL, and the server will concatenate the malicious scripts into the URL and return them to the browser, ultimately causing XSS vulnerabilities |
|---|
| 来源 | ⚠️ https://github.com/zonesec0/findcve/issues/5 |
|---|
| 用户 | zonesec (UID 74980) |
|---|
| 提交 | 2025-03-26 07時11分 (2 年前) |
|---|
| 管理 | 2025-04-12 13時48分 (17 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 304569 [YouDianCMS 9.5.21 index.html UserName/LogType 跨网站脚本] |
|---|
| 积分 | 0 |
|---|