Cross site scripting

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

CVE-2021-3370

DouPHP v1.6 contains a cross-site scripting (XSS) vulnerability in the /admin/cloud.php path. The issue stems from lack of proper data validation/escaping in user-supplied data, enabling injection of JavaScript into the client side. The affected component is the admin cloud page of DouPHP; CVE-20...

CVE-2021-3370: Improper Neutralization of Input During Web Page Generation

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...