CVE-2021-26084

CVE-2021-26084 هذا هو الاستغلال wikipoc.py -u http://xxxxx.com -p /pages/createpage-entervariables.action?SpaceKey=x...

XSS in bookmarks plugin

The bookmarking code under the url http://localhost:8080/plugins/socialbookmarking/updatebookmark.action is vulnerable to XSS attacks using the spaceKey parameter: submitting the following code will execute javascript: spaceKey=%22%3E%3Cscript%3Ealertdocument.cookie%3C/script%3E%22%3E IMPORTANT:...