CVE-2023-53936
Cameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post Creation
Résumé
Cameleon CMS 2.7.4 Authenticated Persistent Cross-Site Scripting via Post Creation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Cameleon CMS 2.7.4 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts into post titles. Attackers can create posts with embedded SVG scripts that execute when other users mouse over the post title, potentially stealing session cookies and executing arbitrary JavaScript.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com