漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Stored XSS in flatpressblog/flatpress
Vulnerability Description
A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading to the file being processed as an HTML file. This allows an attacker to execute arbitrary JavaScript code, which can be used to steal user cookies, perform HTTP requests, and access content of the same origin.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
FlatPress 跨站脚本漏洞
Vulnerability Description
FlatPress是FlatPress开源的一个轻量级、易于设置的平面文件博客引擎。 FlatPress 1.3版本存在跨站脚本漏洞。攻击者利用该漏洞可以上传恶意文件并执行任意JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A