漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Shaarli vulnerable to stored XSS via Suggested Tags
Vulnerability Description
Shaarli is a personal bookmarking service. Prior to version 0.16.0, crafting a malicious tag which starting with `"` prematurely ends the `<input>` tag on the start page and allows an attacker to add arbitrary html leading to a possible XSS attack. Version 0.16.0 fixes the issue.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Shaarli 跨站脚本漏洞
Vulnerability Description
Shaarli是Shaarli Community开源的一套网站克隆工具。 Shaarli 0.16.0之前版本存在跨站脚本漏洞,该漏洞源于恶意标签处理不当,可能导致跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A