漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload
Vulnerability Description
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the `/api/upload` endpoint allows an attacker to perform a reflected cross-site scripting (XSS) attack by submitting malicious payloads in the `libraryId` field. The unsanitized input is reflected in the server’s error message, enabling arbitrary JavaScript execution in a victim's browser. This issue has been patched in version 2.21.0.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Audiobookshelf 跨站脚本漏洞
Vulnerability Description
Audiobookshelf是Audiobookshelf开源的一个自托管的有声读物和播客服务器。 Audiobookshelf 2.21.0之前版本存在跨站脚本漏洞，该漏洞源于/api/upload端点输入处理不当，可能导致反射型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A