Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipulate the "rel_id" parameter in a crafted URL and lure a user with admin privileges into visiting it, achieving JavaScript code execution in the victim's browser. The issue was reported to the developers and fixed in version 2.0.20.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microweber 安全漏洞
Vulnerability Description
Microweber是Microweber开源的一套可提供拖拽功能的网上商店管理系统。该系统包括添加商品、图片等模块。 Microweber 2.0.19版本存在安全漏洞，该漏洞源于/admin/category/create端点存在跨站脚本，攻击者可操纵rel_id参数并诱骗具有管理员权限的用户访问，从而在受害者浏览器中执行JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A