Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Phorum消息表单字段HTML注入变量漏洞
Vulnerability Description
Phorum 3.4.3及其之前的版本存在跨站脚本攻击(XSS)漏洞。远程攻击者可以借助(1) subject,(2)author's name,(3)author's e-mail的标签名中带有一个“<<”的消息注入任意web脚本和HTML标签。
CVSS Information
N/A
Vulnerability Type
N/A