Researching Open Source apps for XSS to RCE flaws

Summary

Case studies turning XSS into RCE: in Evolution CMS 3.1.8 reflected XSS abuses the admin file manager to overwrite index.php; FUDForum 3.1.1 has stored XSS via attachment names; plus GitBucket.

Published: 2022-07-28 13:54
Collected: 2026-07-24 04:16

original ↗

Related coverage

back