ritecms

🛡️ CVE-2024-28623 – RiteCMS v3.0.0 中的 XSS 漏洞 🔍 概述 本仓库记录了一个在 RiteCMS v3.0.0 中发现的跨站脚本（XSS）漏洞，该漏洞由我报告并分配了 CVE 编号 CVE-2024-28623 。 📄 漏洞详情 CVE ID ：CVE-2024-28623 产品 ：RiteCMS 受影响版本 ：v3.0.0 漏洞类型 ：反射型跨站脚本（XSS） 漏洞组件 ：mainmenu/editsection 状态 ：已在 NVD 上公开披露 ⚠️ 影响 该 XSS 漏洞允许攻击者在受害者浏览器中执行任意 JavaScript，从而导致：...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

Cross site scripting

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2024-28623

RiteCMS 3.0.0 contains a reflected XSS in the main_menu/edit_section component. The vulnerability stems from unsanitized user input, allowing an attacker to inject and execute arbitrary JavaScript in the victim’s browser. Impact includes potential credential/session token theft and browser sessio...