CVE-2023-30205

A stored cross-site scripting XSS vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the uniqueid parameter in /admin/article.php...

PT-2023-14933 · Douphp · Douphp

Name of the Vulnerable Software and Affected Versions: DouPHP version 1.7 20221118 Description: A cross-site scripting XSS issue in the /admin/article category.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter...