Cross site scripting

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

CVE-2021-3370

DouPHP v1.6 contains a cross-site scripting (XSS) vulnerability in the /admin/cloud.php path. The issue stems from lack of proper data validation/escaping in user-supplied data, enabling injection of JavaScript into the client side. The affected component is the admin cloud page of DouPHP; CVE-20...

CVE-2021-3370: Improper Neutralization of Input During Web Page Generation

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

PT-2021-20276

Name of the Vulnerable Software and Affected Versions: DouPHP version 1.6 Description: A cross-site scripting XSS issue was found in DouPHP. The issue is related to the "/admin/cloud.php" API endpoint. Recommendations: For DouPHP version 1.6, as a temporary workaround, consider restricting access...