Popcorn Time 0.4.7 has a Stored XSS in...... CVE-2022-25229
3.5
AV
AC
AU
C
I
A
发布：
2022-05-20
修订：
2024-11-21
Popcorn Time 0.4.7 has a Stored XSS in the 'Movies API Server(s)' field via the 'settings' page. The 'nodeIntegration' configuration is set to on which allows the 'webpage' to use 'NodeJs' features, an attacker can leverage this to run OS commands.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
