CVE-2023-46054
Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script to the we...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script to the website_footer parameter in the admin/settings/save.php component.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com