Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Qool CMS Multiple Persistent Cross-Site Scripting Vulnerabilities
Vulnerability Description
Qool CMS contains multiple persistent cross-site scripting vulnerabilities in several administrative scripts where POST parameters are not properly sanitized before being stored and returned to users. Attackers can inject malicious JavaScript code through parameters like 'title', 'name', 'email', 'username', 'link', and 'task' in endpoints such as addnewtype, addnewdatafield, addmenu, addusergroup, addnewuserfield, adduser, addgeneraldata, and addcontentitem to execute arbitrary scripts in administrator browsers.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Qool CMS 跨站脚本漏洞
Vulnerability Description
Qool CMS是basdog22个人开发者的一个内容管理系统。 Qool CMS存在跨站脚本漏洞，该漏洞源于多个管理脚本中POST参数清理不当，可能导致攻击者注入恶意JavaScript代码执行任意脚本。
CVSS Information
N/A
Vulnerability Type
N/A