Open magicming200 opened 6 years ago
Hi, I have found a stored XSS vulnerability. Not same with issue #427 . The trigger is in page's content section, not title section.
Steps to replicate:
<script>alert(document.cookie)</script>
Impacts: Anyone who visit the target page will be affected to triage JavaScript code, including administrator, editor, and guest.
Affected Version: 3.0.4
Affected URL: http:///monstra/blog/.php
Hi, I have found a stored XSS vulnerability. Not same with issue #427 . The trigger is in page's content section, not title section.
Steps to replicate:
<script>alert(document.cookie)</script>
Impacts: Anyone who visit the target page will be affected to triage JavaScript code, including administrator, editor, and guest.
Affected Version: 3.0.4
Affected URL: http:///monstra/blog/.php