Threats tagged 'ghsa-vh8h-v2jf-8659'

A cross-site scripting (XSS) vulnerability exists in sunkaifei FlyCMS affecting the ModelDataService.insertData function in the articles/detail.html file of the Content Rendering component. This flaw allows remote attackers to manipulate the content argument to execute XSS attacks. The product uses continuous delivery with rolling releases, so no specific affected or fixed versions are provided. A patch identified by commit 714521a9262e7bc9ca5713c873f57e96a4845352 is recommended to address this issue. The CVSS score is 3.5, indicating a low severity vulnerability.