Cross-site Scripting (XSS)

SSCMS is vulnerable to Cross-site Scripting XSS. The vulnerability exists because of the improper sanitization in the ajaxDivId argument in the Submit function of ActionsSearchController.Submit.cs, which allows an attacker to inject and execute malicious javascript through the...

SiteServer CMS 跨站脚本漏洞

SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A cross-site scripting vulnerability exists in SiteServer CMS version 7.2.1 and prior versions, which stems from cross-site scripting due to incorrect manipulation of...

PT-2023-21852 · Unknown · Siteserver Cms

Name of the Vulnerable Software and Affected Versions: SiteServer CMS versions up to 7.2.1 Description: A problematic issue was found in the software, affecting an unknown function of the file /api/stl/actions/search. The manipulation of the ajaxDivId argument leads to cross-site scripting. It is...