Stored XSS in PluXml CMS

PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality. Attacker with editing privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only versions 5.8.21 and 5.9.0-rc7 were tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

PluXml CMS 跨站脚本漏洞

PluXml CMS是法国PluXml公司的一个无数据库内容管理系统。 PluXml CMS 5.8.21版本和5.9.0-rc7版本存在跨站脚本漏洞，该漏洞源于静态页面编辑功能存在存储型跨站脚本，可能导致注入任意HTML和JS。

N/A

N/A