CVE-2022-24131

CVE-2022-24131 affects DouPHP v1.6 Release 20220121. The issue is a Cross Site Scripting (XSS) vulnerability in the backend via /admin/login.php that can lead to JavaScript code execution. Exploitation details, affected versions beyond the stated release, and remediation steps are not provided in...

CVE-2021-3370

DouPHP v1.6 contains a cross-site scripting (XSS) vulnerability in the /admin/cloud.php path. The issue stems from lack of proper data validation/escaping in user-supplied data, enabling injection of JavaScript into the client side. The affected component is the admin cloud page of DouPHP; CVE-20...