CVEs-PoC/2024/CVE-2024-25167.md

CVE-2024-25167

Description

Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument description parameter when submitting a comment on a post.

POC

Reference

• https://github.com/biantaibao/eblog_xss/blob/main/report.md
• https://github.com/biantaibao/eblog_xss/blob/main/report.md

Github

No PoCs found on GitHub currently.