| 标题 | 大漠急速开发 DMadmin Based on ThinkPhp 3.23 development version xss |
|---|
| 描述 | In the backend system settings, you can directly insert XSS POCs into any parameter input box. Submitted special characters will not be escaped or commented out and will be written to the database, leading to stored XSS. |
|---|
| 来源 | ⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE-2025-2-2.md |
|---|
| 用户 | Dee.Mirage (UID 71702) |
|---|
| 提交 | 2025-12-05 09時50分 (10 月前) |
|---|
| 管理 | 2025-12-15 16時01分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 336467 [vion707 DMadmin 直到 3403cafdb42537a648c30bf8cbc8148ec60437d1 Backend AddonsController.class.php add 跨网站脚本] |
|---|
| 积分 | 17 |
|---|