3 matches found
CVE-2022-25464
A stored cross-site scripting XSS vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-25464
A stored cross-site scripting XSS vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
DoraCMS 跨站脚本漏洞
DoraCMS is a software application. A content management system written based on Nodejs + eggjs + mongodb. A security vulnerability exists in the component /admin/contenttemp in DoraCMS v2.1.8, which allows attackers to execute arbitrary web script or HTML via a crafted attack payload...