LightCMS 是一个基于 Laravel 开发的轻量级 CMS 系统,也可以作为一个通用的后台管理框架使用。A lightweight cms/admin framework powered by Laravel.
Geek Repo:Geek Repo
Github PK Tool:Github PK Tool
eexp opened this issue a year ago · comments
The system does not verify the host value. If the host value is modified, the link returned by the website will splice the malicious host value。like this:
And the header Referer does not verify the value too. we can jump any website and xss
https://portswigger.net/web-security/host-header