Joomla! 授权问题漏洞

Joomla! is a set of forum components used in the Joomla! content management system. versions 2.5.0 through 3.10.6 and 4.0.0 through 4.1.0 contain an authorization issue vulnerability that originates from a lack of authentication measures or insufficient authentication strength in the web system o...

Design/Logic Flaw

A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...

Cross-site Scripting (XSS) - Stored

Description The application does not escape special characters before output to FE, lead to stored XSS. Proof of Concept 1. Go to Content Menus or Content Items. 2. Add an Item with the title set to XSS payload, e.g: Title" 3. Save Draft or Publish Go to View/Preview Draft. XSS will be triggered...