漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Qool CMS Multiple Persistent Cross-Site Scripting Vulnerabilities
Vulnerability Description
Qool CMS contains multiple persistent cross-site scripting vulnerabilities in several administrative scripts where POST parameters are not properly sanitized before being stored and returned to users. Attackers can inject malicious JavaScript code through parameters like 'title', 'name', 'email', 'username', 'link', and 'task' in endpoints such as addnewtype, addnewdatafield, addmenu, addusergroup, addnewuserfield, adduser, addgeneraldata, and addcontentitem to execute arbitrary scripts in administrator browsers.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Qool CMS 跨站脚本漏洞
Vulnerability Description
Qool CMS是basdog22个人开发者的一个内容管理系统。 Qool CMS存在跨站脚本漏洞，该漏洞源于多个管理脚本中POST参数清理不当，可能导致攻击者注入恶意JavaScript代码执行任意脚本。
CVSS Information
N/A
Vulnerability Type
N/A