提交 #571939: project_team Tmall_demo 2025/05/05 latest Stored Cross-Site Scripting信息

标题project_team Tmall_demo 2025/05/05 latest Stored Cross-Site Scripting
描述The latest version of Tmall_demo has a storage XSS vulnerability at the detailed address of the function point where the order is placed,which can steal sensitive user information, tamper with page content, 和 spread malware for a long time, seriously threatening user privacy and website reputation.
来源⚠️ https://github.com/bdkuzma/vuln/issues/13
用户
 baihekuz (UID 84516)
提交2025-05-06 09時13分 (12 月前)
管理2025-05-23 20時42分 (17 days later)
状态已接受
VulDB条目310213 [Tmall Demo 直到 20250505 Buy Item Page Detailed Address 跨网站脚本]
积分18

Interested in the pricing of exploits?

See the underground prices here!