漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
Solspace Freeform plugin affected by Stored Cross-Site Scripting (XSS) in Freeform Craft Plugin CP UI (builder/integrations)
漏洞信息
Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user (able to create/edit forms) can inject arbitrary HTML/JS into the Craft Control Panel (CP) builder and integrations views. User-controlled form labels and integration metadata are rendered with dangerouslySetInnerHTML without sanitization, leading to stored XSS that executes when any admin views the builder/integration screens. This vulnerability is fixed in 5.14.7.
漏洞信息
N/A
漏洞
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
漏洞
Craft CMS 跨站脚本漏洞
漏洞信息
Craft CMS是Craft CMS开源的一套内容管理系统（CMS）。 Craft CMS 5.14.7之前版本存在跨站脚本漏洞，该漏洞源于用户控制的表单标签和集成元数据未经清理直接渲染，可能导致存储型跨站脚本攻击。
漏洞信息
N/A
漏洞
N/A