Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\editor\Uploader.class.php component. This security flaw allows attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed or accessed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MetInfo CMS 安全漏洞
Vulnerability Description
MetInfo CMS是中国米拓（MetInfo）公司的一个内容管理系统。 MetInfo CMS 8.0版本存在安全漏洞，该漏洞源于SVG文件上传验证和清理不足，可能导致存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A