Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A HTML Injection vulnerability in the comment section of the project page in MicroStudio 24.01.29 allows remote attackers to inject arbitrary web script or HTML via the text parameter of add_project_comment function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
microStudio 安全漏洞
Vulnerability Description
microStudio是Gilles个人开发者的一个在线游戏引擎。 microStudio 24.01.29版本存在安全漏洞,该漏洞源于项目页面评论部分存在HTML注入,可能导致远程攻击者通过add_project_comment函数的text参数注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A