安全研究
CVE-2023-43341 Evolution CMS Reflected XSS：管理面板的反射攻击面
Thinking
2023-09-15
1 分钟阅读
研究档案
#漏洞分析#代码审计#Web安全
Evolution CMS 在管理面板的多个参数上缺乏 escape——攻击者构造的 URL 在管理员点击时直接触发 XSS，获得后台完整控制。
Unlock to view this content.
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