Loading
◆◆0

DedeCMS v5.7 shops delivery 存储型XSS漏洞/en

免费、自由、人人可编辑的漏洞库--PwnWiki.com

,

Prerequisites

The site needs to enable the store function.

Exploit

Add in the background

Add delivery.png

After successful addition, the list of delivery methods will be displayed directly, and XSS will be triggered;
In addition, this XSS will also be triggered when the front-end user purchases something and chooses the delivery method

Reference

https://wiki.bylibrary.cn/%E6%BC%8F%E6%B4%9E%E5%BA%93/01-CMS%E6%BC%8F%E6%B4%9E/DedeCMS/DedeCMS_v5.7_shops_delivery_%E5%AD%98%E5%82%A8%E5%9E%8BXSS/

PWNWIK.COM