Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the (1) text, (2) FirstName, (3) LastName, (4) OrganisationName, (5) OrganisationUrl, (6) Profession, (7) Country, (8) State, (9) Address, (10) Location, (11) Telephone, (12) VoIP, (13) InstantMessagingIM, (14) Email, (15) HomePage, or (16) Comment parameter. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Foswiki多个参数跨站脚本漏洞
Vulnerability Description
Foswiki是一个用 Perl 语言开发的 Wiki 软件，是一个真正的自由且开放源码的Wiki和用户建立应用程式的平台，适合公共和企业环境使用。 Foswiki 1.1.5之前版本的UI/Register.pm中存在多个跨站脚本漏洞（XSS）。拥有CHANGE权限的远程认证用户可利用此漏洞借助（1）text（2）FirstName（3） LastName（4） OrganisationName（5） OrganisationUrl（6）Profession（7）Country（8） State（9）A
CVSS Information
N/A
Vulnerability Type
N/A