Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
** exclusively-hosted-service ** A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBest platform 2023.3 allows authenticated low-privileged attackers to execute arbitrary JavaScript in the context of other users' sessions. This can be exploited to access administrative data and functions, leading to privilege escalation and full compromise of sensitive user data, as demonstrated by the ability to fetch and exfiltrate the contents of the /admin/users endpoint.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SelfBest 安全漏洞
Vulnerability Description
SelfBest是美国SelfBest公司的一个专注开发的平台。 SelfBest 2023.3版本存在安全漏洞，该漏洞源于聊天功能中存在存储型跨站脚本，可能导致低权限攻击者执行任意JavaScript代码，从而获取敏感数据或提升权限。
CVSS Information
N/A
Vulnerability Type
N/A