Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OPEXUS FOIAXpress stored XSS via logo image
Vulnerability Description
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perform actions on behalf of the target, including stealing session cookies, user credentials, or sensitive data.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
OPEXUS FOIAXpress 安全漏洞
Vulnerability Description
OPEXUS FOIAXpress是美国OPEXUS公司的一个信息公开管理软件。 OPEXUS FOIAXpress 11.13.3.0之前版本存在安全漏洞，该漏洞源于允许管理用户上传嵌入JavaScript或其他内容的SVG图像，可能导致跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A