提交 #571939: project_team Tmall_demo 2025/05/05 latest Stored Cross-Site Scripting信息

标题project_team Tmall_demo 2025/05/05 latest Stored Cross-Site Scripting
描述The latest version of Tmall_demo has a storage XSS vulnerability at the detailed address of the function point where the order is placed,which can steal sensitive user information, tamper with page content, 和 spread malware for a long time, seriously threatening user privacy and website reputation.
来源⚠️ https://github.com/bdkuzma/vuln/issues/13
用户
 baihekuz (UID 84516)
提交2025-05-06 09時13分 (1 年前)
管理2025-05-23 20時42分 (17 days later)
状态已接受
VulDB条目310213 [Tmall Demo 直到 20250505 Buy Item Page Detailed Address 跨网站脚本]
积分18

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!