DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://github.com/secflag/Vulnerabilitys/blob/main/DirCMS_V6.0.0_XSS_vulnerability.md | third party advisory exploit |