Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user section from the admin panel, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Magicpin 跨站脚本漏洞
Vulnerability Description
Magicpin是印度Magicpin公司的一个用于探索周边热门生活服务的Web平台。该平台主要为用户提供促销打折活动、内容变更、商家动态等信息以及社交功能搜索、发现周边商户和餐厅、积分兑换等服务。 Magicpin v2.1版本存在跨站脚本漏洞，该漏洞源于用户注册部分中有一个存储的XSS。每当管理员从管理面板访问manage user部分时，XSS就会触发，攻击者可利用该漏洞就能够根据精心设计的有效负载窃取cookie。
CVSS Information
N/A
Vulnerability Type
N/A