提交 #622227: roothub2.6 2.6 XSS
| 标题 | roothub2.6 2.6 XSS |
|---|---|
| 描述 | This CMS version 2.6 has a storage XSS vulnerability that can be triggered by "><img src=x onerror=alert(1)> In java code: src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java There doesn't seem to be any filtering for XSS here |
| 来源 | ⚠️ https:/ |
| 用户 | wanderofu (UID 87839) |
| 提交 | 2025-07-25 05時46分 (1 年前) |
| 管理 | 2025-07-25 21時01分 (15 hours later) |
| 状态 | 已接受 |
| VulDB条目 | 317779 [Roothub 直到 2.6 SystemConfigAdminController.java edit 跨网站脚本] |
| 积分 | 15 |