Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Company Info Settings component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtCompanyName parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mojoPortal 跨站脚本漏洞
Vulnerability Description
mojoPortal是美国Joe Audette个人开发者的一套开源的、面向对象的网站架构（WSF）和内容管理系统（CMS）。该系统提供事件日历、相册、文件管理器等。 mojoPortal v2.7.0.0版本存在安全漏洞，该漏洞源于在组件Company Info Settings中存在存储型跨站脚本(XSS)漏洞，攻击者利用该漏洞可以通过将精心设计的有效载荷注入到txtCompanyName参数来执行任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A