FuseTalk Forum IMG Tag HTML...

- AV AC AU C I A
发布: 2004-10-13
修订: 2025-04-13

FuseTalk Forum is prone to an HTML injection vulnerability. This is because the script that processes posts does not sufficiently sanitize user input, allowing attackers to embed HTML and script commands within the post. The attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user.

0%
当前有1条漏洞利用/PoC
当前有0条受影响产品信息