Headline

CVE-2023-46467: [CVE-2023-46467] There's an Stored XSS vulnerability in Juzaweb CMS

Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page.

12 months ago

CVE

Open in Source

#sql #xss #vulnerability #web #git

首页 › web安全 › [CVE-2023-46467] There’s an Stored XSS vulnerability in Juzaweb CMS

2023-10-19 15:22

56 0

CVE ID

CVE-2023-46467

GitHub

https://github.com/juzaweb/cms

Influenced Version

<= v3.4

Vulnerability Type

Cross Site Scripting(XSS)

Description

Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page.

http://ip/register:

http://ip/admin-cp:

评论 (暂无评论)

发表评论

Sumor 菜到不能肤吸。

36文章 10评论 2栏目