Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
Vulnerability Description
Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields. Attackers can input script payloads in the first name field that will execute when the profile is viewed by other users, potentially stealing session cookies and executing arbitrary JavaScript.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Microweber 跨站脚本漏洞
Vulnerability Description
Microweber是Microweber开源的一套可提供拖拽功能的网上商店管理系统。该系统包括添加商品、图片等模块。 Microweber 2.0.15版本存在跨站脚本漏洞，该漏洞源于用户个人资料字段存在存储型跨站脚本，可能导致执行任意JavaScript。
CVSS Information
N/A
Vulnerability Type
N/A