Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Cross-site scripting (XSS) vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
G3W-SUITE 跨站脚本漏洞
Vulnerability Description
G3W-SUITE是G3W-SUITE开源的一个使用 Django 和 VueJs 构建的框架。 G3W-SUITE 3.5版本存在安全漏洞，该漏洞源于允许远程用户注入任意 Web 脚本或 HTML ，并通过description参数获取权限。
CVSS Information
N/A
Vulnerability Type
N/A