Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del, (2) delbackup, (3) res, or (4) ren action. NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CONTENTCustomizer Dialog.PHP 跨站脚本攻击漏洞
Vulnerability Description
CONTENTCustomizer 3.1mp版本及其早期版本的dialog.php存在跨站脚本攻击漏洞。远程攻击者可以借助一个(1) del, (2)delbackup,(3)res, 或(4)ren操作执行某些特权操作。注意:这个问题可以用来进行跨站点脚本(XSS)以及其他可能的攻击。
CVSS Information
N/A
Vulnerability Type
N/A