Skip to content

Stored XSS exists #5

Open
Open
@lHackl-007

Description

1.The problem is in system settings - basic settings - default settings - third party code
write:<script>alert(1)</script> Save, open the home page and the XSS code will pop up
The problem is as follows:
image

2.Management background-content management-all management modules-add a piece of content-insert video in the content, write:img src="x" onerror="alert(1);"
image
Save, open the corresponding foreground article and background article will pop up XSS code
The problem is as follows:
image

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions