Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an admin. An attack uses the announce_content parameter in an index.php?/modcp/announcements/&action=create request. This is related to the "<> Source" option.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Invision Power Services Community Suite 跨站脚本漏洞
Vulnerability Description
Invision Power Services (IPS) Community Suite是一个用于在网络上构建社区的集成应用程序。 IPS Community Suite 4.1.19.2及之前的版本中的Announcements存在跨站脚本漏洞。远程攻击者可借助index.php?/modcp/announcements/&action=create请求中的‘announce_content’请求利用该漏洞将Invision Power Board版主权限提升到管理员权限。
CVSS Information
N/A
Vulnerability Type
N/A