Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Discuz! X3.4 allows XSS via admin.php because admincp/admincp_setting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Discuz! 跨站脚本漏洞
Vulnerability Description
Discuz!是一款华人地区非常流行的Web论坛程序。 Discuz! X3.4版本中存在跨站脚本漏洞，该漏洞源于admincp/admincp_setting.php和templatedefaultcommonfooter.htm文件没有正确的处理statcode字段。远程攻击者可借助admin.php文件利用该漏洞注入任意的Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A