Ciber-Mike/BigTree_CMS-Stored_XSS-Developer_Settings

Ciber-Mike/BigTree_CMS-Stored_XSS-Developer_Settings

GitHubGitHub
GitHubgithub.com
Releases0
BigTree CMS version 4.5.7 is affected by a Stored Cross-Site Scripting (XSS) vulnerability that allows an attacker to inject malicious code into the developer settings panel, enabling them to execute stored code when accessing the /site/index.php/admin/developer/settings resource.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-44954↗
5.4 MEDIUM—

Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute arbitrary code via the ID parameter in the Developer Settings functions.