| 标题 | westboy CicadasCMS 1.0 Cross Site Scripting |
|---|
| 描述 | In CicadasCMS v1.0, an attacker can construct input that contains malicious script that the browser will execute when another user accesses the affected page, resulting in a cross-site scripting (XSS) attack, due to insufficient input validation and output encoding of the user's content parameters. |
|---|
| 来源 | ⚠️ https://github.com/devastatingglamour/CVE/blob/main/CicadasCMS-XSS.md |
|---|
| 用户 | xmttz (UID 89920) |
|---|
| 提交 | 2025-09-16 10時57分 (1 年前) |
|---|
| 管理 | 2025-09-26 14時08分 (10 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 300625 [westboy CicadasCMS 1.0 /system/cms/content/save title/content/laiyuan 跨网站脚本] |
|---|
| 积分 | 0 |
|---|