| 标题 | roothub https://github.com/miansen/Roothub/tree/v2.6 2.6 XSS |
|---|
| 描述 | The source code address is:
https://github.com/miansen/Roothub/tree/v2.6
This CMS version 2.6 has a storage XSS vulnerability that can be triggered by "><img src=x onerror=alert(1)>
In java code:
src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java
There doesn't seem to be any filtering for XSS here
Please see the vulnerability reproduction process
https://github.com/wandeorfu/test |
|---|
| 来源 | ⚠️ https://github.com/wandeorfu/test |
|---|
| 用户 | wanderofu (UID 87839) |
|---|
| 提交 | 2025-07-25 10時52分 (1 年前) |
|---|
| 管理 | 2025-07-26 15時18分 (1 day later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 317779 [Roothub 直到 2.6 SystemConfigAdminController.java edit 跨网站脚本] |
|---|
| 积分 | 0 |
|---|