漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Formie has a XSS vulnerability for importing forms
Vulnerability Description
Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who have themselves exported the form from one environment to another, and would require direct manipulation of the JSON export, this is marked as moderate. This vulnerability will not occur unless someone deliberately tampers with the export. This vulnerability is fixed in 2.1.44.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Formie for Craft CMS 跨站脚本漏洞
Vulnerability Description
Formie for Craft CMS是Verbb开源的一个Craft CMS的表单插件。 Formie for Craft CMS 2.1.44之前版本存在跨站脚本漏洞，该漏洞源于导入表单时未正确转义输出。
CVSS Information
N/A
Vulnerability Type
N/A