漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Stored Cross-Site Scripting (XSS) vulnerability in Sergestec's Exito
Vulnerability Description
Stored Cross-Site Scripting (XSS) in Sergestec's Exito v8.0, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'obs' parameter in '/admin/index.php?action=product_update'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Sergestec Exito 跨站脚本漏洞
Vulnerability Description
Sergestec Exito是Sergestec公司的一个销售平台。 Sergestec Exito v8.0版本存在跨站脚本漏洞，该漏洞源于对文件/admin/index.php中参数obs的用户输入验证不足，可能导致存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A