漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
In Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation. A remote authenticated attacker could create and upload a .nessus file, which may be viewed by an administrator allowing for the execution of arbitrary script code in a user's browser session. In other scenarios, XSS could also occur by altering variables from the Advanced Settings.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tenable Network Security Nessus 跨站脚本漏洞
Vulnerability Description
Tenable Network Security Nessus是美国Tenable Network Security公司的一款具有较强可扩展性的开源漏洞扫描器。 Tenable Network Security Nessus 7.1.0之前版本中存在跨站脚本漏洞，该漏洞源于程序没有正确的执行输入验证。远程攻击者可通过创建并上传.nessus文件或更改高级设置中的变量利用该漏洞在用户浏览器会话中执行任意的脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A