Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
XSS vulnerability in oro/platform
Vulnerability Description
OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an email template. For successful payload, execution the attacked user must preview a vulnerable email template. There are no workarounds that address this vulnerability. Users are advised to upgrade as soon as is possible.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
OroPlatform 跨站脚本漏洞
Vulnerability Description
OroPlatform是一个 PHP 业务应用程序平台 (BAP)，旨在使自定义业务应用程序的开发更容易、更快。 OroPlatform 存在安全漏洞，该漏洞源于在受影响的版本中，电子邮件模板预览容易受到添加到电子邮件模板内容的 XSS 负载的攻击。
CVSS Information
N/A
Vulnerability Type
N/A