未評価
There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS
CVE-2021-46030
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS <= v2. By entering specific statements into the background tag management module, the attack statement will be stored in the database, and the next victim will be attacked when he accesses the tag module.
参照URL
- report github.com