漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Reflected Cross-Site Scripting in Navigate CMS application
Vulnerability Description
Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through designed query parameters. This results in unsafe HTML rendering, which could allow a remote attacker to execute JavaScript code in the victim's browser.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Navigate Content Management System 跨站脚本漏洞
Vulnerability Description
Navigate Content Management System是西班牙Navigate公司的一个网站内容管理系统。 Navigate Content Management System存在跨站脚本漏洞,该漏洞源于/blog端点用户输入未通过设计的查询参数适当清理,可能导致不安全的HTML渲染,使远程攻击者在受害者浏览器执行JavaScript代码。
CVSS Information
N/A
Vulnerability Type
N/A