CVE-2023-26847中 5.4A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted…
CVE-2023-26846中 5.4A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted…
CVE-2023-27295中 5.4Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by…
CVE-2023-27294中 5.4Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted account to submit m…
CVE-2023-27293中 6.1Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javascript as the answer …