CVE-2023-44769_ZenarioCMS--Reflected-XSS---Alias

ZenarioCMS 反射型XSS v.9.4.59197 作者：Sergio 描述： ZenarioCMS v.9.4.59197 中存在跨站脚本漏洞，允许本地攻击者通过向“备用别名”Spare aliases 中的别名Alias注入恶意脚本来执行任意代码。 攻击向量： “备用别名”Spare aliases 输入项处理中的漏洞，使得注入的 JavaScript 代码在用户访问网页时会被执行。 POC： 登录面板后，我们进入管理菜单中的“菜单节点属性 - 选择内容项”。 选择一个别名，然后点击“编辑内容项”： 现在进入“编辑别名”： 我们在“备用别名”字段中添加...

GHSA-8G87-73VQ-443P Zenario CMS Cross-site Scripting vulnerability

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

Cross site scripting

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...

CVE-2023-44769

A Cross-Site Scripting XSS vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias...