The vulnerability of the FileDialog.aspx component in the mojoPortal content management system allows a hacker to execute XSS attacks.

The vulnerability of the FileDialog.aspx component in the mojoPortal content management system exists because measures to neutralize special elements used in the operating system command have not been implemented. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...

CVE-2023-24322

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

CVE-2023-24322

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

mojoPortal 跨站脚本漏洞

mojoPortal is the United States Joe Audette individual developer of a set of open source , object-oriented Web site architecture WSF and content management system CMS. The system offers event calendars, photo albums, file managers, and more. A security vulnerability exists in mojoPortal version...

CVE-2023-24322

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

CVE-2023-24322

CVE-2023-24322 affects mojoPortal 2.7.0.0. A reflected cross-site scripting (XSS) flaw exists in the FileDialog.aspx component, exploitable by sending a crafted payload into the ed and tbi parameters. Public sources describe the vulnerability as allowing an attacker to inject arbitrary web script...