Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\img_admin.class.php component. The vulnerability allows attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed or accessed by users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MetInfo CMS 安全漏洞
Vulnerability Description
MetInfo CMS是中国米拓（MetInfo）公司的一个内容管理系统。 MetInfo CMS 8.0版本存在安全漏洞，该漏洞源于图像管理模块未验证SVG文件输入，可能导致存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A