CVE-2023-41618

CVE-2023-41618
[Discoverer]:wuhaozhe&yunda
[NAME OF AFFECTED PRODUCT(S)] :https://github.com/emlog/emlog
[AFFECTED AND/OR FIXED VERSION(S)] : https://github.com/emlog/emlog - pro2.1.14
[Affected Component] :The affected code: %27%22()%26%25%3Czzz%3E%3CScRiPt%20%3Ealert(9864)%3C/ScRiPt%3E&draft=1,Affected url:/admin/article.php?active_savedraft=1
[ Vulnerability Type]:Cross Site Scripting (XSS)
[Impact]:Stealing client cookies or engaging in phishing scams.

Method of reproducing vulnerabilities
Emlog Pro v2.1.14 was discovered to contain a reflective cross-site
scripting (XSS) vulnerability via the component
/admin/article.php?active_savedraft=1
There is an xss attack on this URL

for example:
/admin/article.php?active_savedraft=1%27%22()%26%25%3Czzz%3E%3CScRiPt%20%3Ealert(9864)%3C/ScRiPt%3E&draft=1
You can change your JavaScript code to transform your attack content