This repository has been archived by the owner on Dec 1, 2023. It is now read-only.
This repository has been archived by the owner on Dec 1, 2023. It is now read-only.
There is an XSS vulnerability in the place where the article is edited #968
Open
Description
Problem
An attacker can insert a constructed statement into the article. When a user visits this page, it will trigger (XSS) cross site scripting attack
EXP
<svg/onrandom=random onload=confirm(1)>
Technical Details
- Pagekit version:1.0.18.
- Webserver:apache2.4.39
- Database:5.7.26
- PHP Version:7.4.3
Metadata
Assignees
Labels
No labels