CVE-2022-25464

A stored cross-site scripting XSS vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2022-25464

A stored cross-site scripting XSS vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2022-25464

CVE-2022-25464 is a stored XSS vulnerability in DoraCMS v2.1.8 affecting the component /admin/contenttemp. The issue allows an attacker to inject arbitrary scripts/HTML via a crafted payload. Public details place CVSSv3.1 base score at 4.8 (MEDIUM) with network access, low attack complexity, user...

PT-2022-17314

Name of the Vulnerable Software and Affected Versions DoraCMS version 2.1.8 Description A stored cross-site scripting XSS issue in the /admin/contenttemp component allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations For DoraCMS version 2.1.8, consider...

CVE-2022-25464: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

DoraCMS 跨站脚本漏洞

DoraCMS is a software application. A content management system written based on Nodejs + eggjs + mongodb. A security vulnerability exists in the component /admin/contenttemp in DoraCMS v2.1.8, which allows attackers to execute arbitrary web script or HTML via a crafted attack payload...