NukeViet Cross-site Scripting via the editor in the News module

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-22765 · ADVISORY
• nukeviet/nukeviet · PACKAGE
• nukeviet.vn/vi/news/Tin-tuc/nukeviet-cam-on-le-thanh-trung-da-phat-hien-loi-an-ninh-nukeviet-631.html · WEB

nukeviet/nukeviet のその他の脆弱性

• CVE-2026-55372高 7.2NukeViet: Pre-authentication SSRF via X-Forwarded-Host
• CVE-2026-54065高 8.7NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function
• CVE-2026-54064高 8.7NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module
• CVE-2026-49259高 8.7NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2026-48118高 8.2NukeViet: Unauthenticated Reflected XSS in Comment Module