Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "announcement_gonggao" parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Catfish CMS 跨站脚本漏洞
Vulnerability Description
Catfish CMS是一个开源的网站内容管理系统。具备众多优秀的特征,操作简单明了,主题制作方便,应用灵活,可以用于不同类型的网站搭建,如:内容管理系统,个人博客、企业网站等。 Catfish CMS 4.9.90存在安全漏洞,该漏洞允许攻击者可利用该漏洞通过输入“公告公告”参数的精心制作的有效负载执行任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A