Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter at /Controllers/ClientController.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
sysPass 安全漏洞
Vulnerability Description
sysPass是RubénD个人开发者的一个系统密码管理器。 sysPass 3.2.x版本存在安全漏洞,该漏洞源于容易受到跨站脚本攻击。攻击者利用该漏洞通过将特制的有效载荷注入到/Controllers/ClientController.php的name参数来执行任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A