https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4136.yaml

标题： Crafter CMS 跨站脚本漏洞 (CVE-2023-4136)
描述：Crafter CMS是一套面向数字体验应用程序的开源内容管理系统（CMS）。 Crafter CMS 4.0 到4.0.2版本、 3.1 到3.1.27版本存在跨站脚本漏洞，该漏洞源于网页生成期间输入不正确中和，允许反射型 XSS。

CrafterCMS Engine is vulnerable to reflected cross-site scripting (XSS) via the transformerName parameter in the /api/1/site/url/transform endpoint, allowing attackers to execute arbitrary JavaScript in the context of the user.

 id: CVE-2023-4136

info:
  name: CrafterCMS Engine - Cross-Site Scripting
  author: ritikchaddha
  s

...