Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SiteKiosk skinning功能跨站脚本攻击(XSS)漏洞
Vulnerability Description
SiteKiosk的6.5.150之前版本中的skinning功能存在跨站脚本攻击(XSS)漏洞,本地用户可以通过一个在浏览器的标题栏显示的ABOUT: URI来绕过安全保护并注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A