CVE-2023-4136 PoC — Crafter CMS 跨站脚本漏洞

来源

关联漏洞

Description

CrafterCMS Engine is vulnerable to reflected cross-site scripting (XSS) via the transformerName parameter in the /api/1/site/url/transform endpoint, allowing attackers to execute arbitrary JavaScript in the context of the user.

文件快照

 id: CVE-2023-4136

info:
  name: CrafterCMS Engine - Cross-Site Scripting
  author: ritikchaddha
  s

...

备注