There is an XSS vulnerability #319

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

Zhu013 opened this issue Aug 27, 2021 · 0 comments

Zhu013 commented Aug 27, 2021

xxxxx这里是问题描述xxxx

当前使用的版本号
v0.2.1
是否已经升级到新版本
yes
当前遇到的问题
There is an XSS vulnerability in the create new space page when you POST /system/space/save
space_ id=&name=hcw&description=11E&tags=</span></td><img src=1 onerror=alert(1)>&visit_ level=public&is_ share=1
A stored XSS is raised
错误日志或截图
希望增加的功能
filter the tag input

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment