Submit #379205: Ampache 6.5.0 Cross Site Scripting
Title | Ampache 6.5.0 Cross Site Scripting |
---|---|
Description | Ampache 6.5.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability. This vulnerability exists in the "Playlists - Democratic - Configure Democratic Playlist" feature. An attacker with Content Manager permissions can set the Name field to . When any administrator or user accesses the Democratic functionality, they will be affected by this stored XSS vulnerability. |
Source | ⚠️ https:/ |
User | jiashenghe (UID 39445) |
Submission | 23.07.2024 11:36 (vor 9 Monaten) |
Moderation | 24.07.2024 06:11 (19 hours later) |
Status | Duplikat |
VulDB Entry | 272302 [ampache bis 6.5.x Name Cross Site Scripting] |
Points | 0 |