CVE:CVE-2022-31913
CNNVD:CNNVD-202206-1590
Sourcecodester Online Discussion Forum Site是Sourcecodester的一个应用系统。一个在线讨论论坛。
Sourcecodester Online Discussion Forum Site v1.0版本存在跨站脚本漏洞，该漏洞源于/odfs/classes/Master.php?f=save_category, name缺少数据过滤和转义。
solution:Upgrade online_discussion_forum_site_project online_discussion_forum_site to a higher version than 1.0,and avoid the version 1.0