search

taogogo / taocms

taoCMS is an incredible tiny CMS( Content Management System) , writen in PHP and support MySQL/Sqlite as the database(MIT License)
MIT License
60 stars 21 forks source link

Cross Site Scripting #2

Closed PPPio closed 3 years ago

PPPio commented 5 years ago

First Enter the page: http://127.0.0.1/taocms/admin/admin.php?action=frame&ctrl=iframes and the payload is:

taocmsxss1-1

Then,we can see the result.

taocmsxss1-2
taogogo commented 3 years ago

3.0.1 fixed, thanks for your contribution