Threats tagged 'ghsa-fmwx-pf24-4xr8'

A cross-site scripting (XSS) vulnerability exists in fumiao opencms version 2.2 within the Add Model Management Page component. The vulnerability arises from improper handling of the argument 模板前缀 in the /admin/model/addOrUpdate endpoint. The flaw can be exploited remotely but requires some user interaction. Public exploit code has been disclosed. The vulnerability has a low severity rating with a CVSS score of 3.5.