CVE-2025-63441

CVE-2025-63441 标题： 在端点 u/administrator/friends 中通过 arbitrarily supplied URL parameter param 实现反射型 XSS 摘要： 在 OSSN 应用程序的 u/administrator/friends 端点中发现了一个反射型跨站脚本（XSS）漏洞。 该漏洞允许攻击者通过任意提供的 URL 参数名称注入恶意脚本。 影响： 对网站进行虚拟涂改。 执行用户能够执行的任何操作。 将用户重定向到竞争网站。 捕获用户（管理员）的会话 cookie。 已在 OSSN 8.7 及以上版本修复 github:...

CVE-2025-63441

Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...

EUVD-2025-37507

Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...

CVE-2025-63441

Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...

CVE-2025-63441

Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...

CVE-2025-63441

Open Source Social Network OSSN 8.6 is vulnerable to Cross Site Scripting XSS via the parameter param at endpoint u/administrator/friends...

PT-2024-26252 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the my index parameter in the "/view/find friends.php" API endpoint. Recommendations...

PT-2023-26425 · Unknown · Moosocial Moodating

Name of the Vulnerable Software and Affected Versions: mooSocial mooDating version 1.2 Description: A vulnerability was found in the file /friends of the component URL Handler, leading to cross site scripting. The attack can be launched remotely. The manipulation affects an unknown functionality...