| 标题 | https://github.com/withstars/Blog-System Blog-System 1.0 Stored Cross-Site Scripting |
|---|
| 描述 | The Blog-System version 1.0 /admin/article/add interface has a stored cross-site scripting (XSS) vulnerability that allows an attacker to inject malicious JavaScript code via the title parameter. This code is stored in the system and executed when other users visit the relevant page |
|---|
| 来源 | ⚠️ https://github.com/caigo8/CVE-md/blob/main/Blog-System/XSS1.md |
|---|
| 用户 | Caigosec (UID 84067) |
|---|
| 提交 | 2025-04-13 06時07分 (1 年前) |
|---|
| 管理 | 2025-04-26 09時03分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 306297 [withstars Books-Management-System 1.0 /admin/article/add/do 标题 跨网站脚本] |
|---|
| 积分 | 17 |
|---|