漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
flusity CMS posts.php loadPostAddForm cross site scripting
Vulnerability Description
A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument edit_post_id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier of the patch is 6943991c62ed87c7a57989a0cb7077316127def8. It is recommended to apply a patch to fix this issue. The identifier VDB-243641 was assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
flusity CMS 跨站脚本漏洞
Vulnerability Description
flusity CMS是一个可以轻松更改或添加代码的用户交互界面解决方案。 Flusity CMS 存在安全漏洞，该漏洞源于 core/tools/posts.php 的 loadPostAddForm 函数中的参数 edit_post_id 会导致跨站点脚本编写。
CVSS Information
N/A
Vulnerability Type
N/A