CNNVD-202601-002 Information
Jan 01, 2026
cve
CNNVD ID
CNNVD-202601-002
Related CVE
- CNNVD Published: 2026-01-01
Description (Chinese)
wangmarket是中国xnx3个人开发者的一个私有化部署自己的 SAAS 云建站系统。 wangmarket 6.4及之前版本存在代码注入漏洞，该漏洞源于对文件/siteVar/save.do中参数Remark/Variable Value的错误操作，可能导致跨站脚本攻击。
Description (English)
Wangmarket is a privatized xx3 individual developer in China that deploys its own SAAS cloud station system. Wangmarket 6.4 et seq. contains a code-injection loophole, which stems from an error of operation of the parameter Remark/Variable Value in file/siteVar/save.do, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2026-01-01
Last Modified
2026-02-24
References
https://github.com/yuccun/CVE/blob/main/wangmarket-Stored_Cross-Site_Scripting.md https://vuldb.com/?ctiid.339337 https://vuldb.com/?id.339337 https://vuldb.com/?submit.721080
Share on: