Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context of the Admin account.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OctoberCMS 跨站脚本漏洞
Vulnerability Description
OctoberCMS是加拿大软件开发者Alexey Bobkov和澳大利亚软件开发者Samuel Georges共同研发的一套开源的、自托管的建立在Laravel PHP框架基础上的内容管理系统（CMS）。 OctoberCMS 1.0.425(又名Build 425)版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞上传带有恶意代码的SVG文件。
CVSS Information
N/A
Vulnerability Type
N/A