提交 #554566: https://gitee.com/baseweb/JSite JSite 1.0 Stored Cross-Site Scripting Attack

Version 1.0 of JSite /sys/area/save interface has a Cross-Site Scripting (XSS) vulnerability. Attackers can inject malicious JavaScript code through the 'name' parameter.

• 来源: ⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/XSS3.md
• 用户: c0rdXy (UID 83817)
• 提交: 2025-04-09 03時01分 (1 年前)
• 管理: 2025-04-18 04時44分 (9 days later)
• 状态: 已接受
• VulDB条目: 305612 [baseweb JSite 1.0 /a/sys/area/save name 跨网站脚本]
• 积分: 15