3 matches found
CVE-2022-25464
A stored cross-site scripting XSS vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
4.8CVSS5.9AI score0.00442EPSS
SaveExploits1References1
CVE-2022-25464
A stored cross-site scripting XSS vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
4.8CVSS5.4AI score0.00442EPSS
SaveExploits1References2
DoraCMS 跨站脚本漏洞
DoraCMS is a software application. A content management system written based on Nodejs + eggjs + mongodb. A security vulnerability exists in the component /admin/contenttemp in DoraCMS v2.1.8, which allows attackers to execute arbitrary web script or HTML via a crafted attack payload...
4.8CVSS5.5AI score0.00442EPSS
SaveExploits1References2
20