Cross-site Scripting in beetl-bbs

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-22490 · ADVISORY
• cui2shark/security · WEB

com.ibeetl:beetl のその他の脆弱性

• CVE-2024-22491中 5.4A Stored Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content paramete…
• CVE-2023-30331緊急 9.8An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.