Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SlashCode跨站脚本漏洞
Vulnerability Description
用于Slashcode和其他地方的Slash 2.2.5之前版本存在跨站脚本漏洞，远程攻击者借助可能在formkey字段中URL的Javascript盗取其他用户的cookies和认证信息。
CVSS Information
N/A
Vulnerability Type
N/A