Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related to the /addnews.html and /index.php?do=addnews URIs) to send a malicious script to unsuspecting Admins or users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DataLife Engine 跨站脚本漏洞
Vulnerability Description
DataLife Engine（DLE）是一套商业内容管理系统（CMS）。该系统支持多级分类管理、所见即所得编辑和图片附件管理等。 DLE 13.0及之前版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞向用户或管理员发送恶意代码，并执行该代码。
CVSS Information
N/A
Vulnerability Type
N/A