DouCo DouPHP 跨站脚本漏洞

DouCo DouPHP is a lightweight enterprise content management system CMS from China's DouCo Network Technology. A security vulnerability exists in DouCo DouPHP v1.7 20221118, which originates from cross-site scripting in the /admin/articlecategory.php component and allows attackers to execute...

PT-2023-14933 · Douphp · Douphp

Name of the Vulnerable Software and Affected Versions: DouPHP version 1.7 20221118 Description: A cross-site scripting XSS issue in the /admin/article category.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter...

CVE-2018-20562

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/articlecategory.php?rec=update has XSS via the catname parameter...