提交 #586862: MCMS V5.5 xss
| 标题 | MCMS V5.5 xss |
|---|---|
| 描述 | During the security review of "MCMS System",I discovered a xss vulnerability in the "/mcms/search.do" .I found that in the MCmsAction class, the clearXss class is not perfect for the xss filtering statement, resulting in the ability to perform xss |
| 来源 | ⚠️ https:/ |
| 用户 | Tom132432 (UID 85670) |
| 提交 | 2025-05-29 17時54分 (1 年前) |
| 管理 | 2025-05-30 12時48分 (19 hours later) |
| 状态 | 重复 |
| VulDB条目 | 215112 [Mingsoft MCMS 5.2.8 search.do content_title 跨网站脚本] |
| 积分 | 0 |