alkacon / opencms-core

The Java open source content management system by Alkacon Software
http://www.opencms.org
GNU Lesser General Public License v2.1
520 stars 575 forks source link

XSS issue #763

Closed fly-kale closed 9 months ago

fly-kale commented 1 year ago

The module management of the OpenCMS address management console has a stored XSS vulnerability. 1:edit module append content <img src="1" onerror="alert(1)" > to module description 2:click "OK" and save 3:XSS Is Triggered by Right-clicking and Viewing Module Information