CVE-2021-22849 Hyweb HyCMS-J1 - Stored XSS

Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS Stored Cross-site scripting attack...

CVE-2021-22849: Improper Neutralization of Input During Web Page Generation

Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS Stored Cross-site scripting attack...

PT-2021-15222

Name of the Vulnerable Software and Affected Versions Hyweb HyCMS-J1 affected versions not specified Description The backend editing function of Hyweb HyCMS-J1 does not filter special characters, allowing users who are logged in to inject JavaScript syntax and perform a stored XSS Stored Cross-si...