CNNVD-202509-2262 Information
Sep 15, 2025
cve
CNNVD ID
CNNVD-202509-2262
Related CVE
- CNNVD Published: 2025-09-15
Description (Chinese)
IbuyuCMS是IbuyuCMS开源的一款内容管理系统。 IbuyuCMS 2.6.3及之前版本存在代码注入漏洞，该漏洞源于对文件/admin/article.php中参数Title的错误操作，可能导致跨站脚本攻击。
Description (English)
IbuyuCMS is an IbuyuCMS open-source content management system. IbuyuCMS 2.6.3 and previous versions had a code-in-the-code loophole, which stemmed from a mishandling of Title, the parameter in file/admin/article.php, which could result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
IbuyuCMS
Published
2025-09-15
Last Modified
2026-02-24
References
https://github.com/Upgradeextension/ibuyu/blob/main/README.md https://vuldb.com/?ctiid.323868 https://vuldb.com/?id.323868 https://vuldb.com/?submit.647590
Share on: