Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ityouknow favorites-web Comment cross site scripting
Vulnerability Description
A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-218294 is the identifier assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
favorites-web 跨站脚本漏洞
Vulnerability Description
favorites-web（云收藏）是纯洁的微笑（ityouknow）个人开发者的一个使用 Spring Boot 构建的开源网站。 favorites-web存在跨站脚本漏洞，该漏洞源于其Comment Handler组件的一些未知功能允许攻击者实现跨站脚本。该攻击方法已经被公开并且可以由远程发起，存在被利用的风险。
CVSS Information
N/A
Vulnerability Type
N/A