Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)
Vulnerability Description
SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated users to execute malicious JavaScript in the context of other logged-in users by uploading malicious JavaScript files in the web UI. This vulnerability is fixed in 2025.102.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Syslifters Sysreptor 跨站脚本漏洞
Vulnerability Description
Syslifters Sysreptor是Syslifters公司的一个渗透测试报告平台。 Syslifters Sysreptor 2025.102之前版本存在跨站脚本漏洞，该漏洞源于认证用户可通过上传恶意JavaScript文件实施存储型跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A