This repository was archived by the owner on Sep 18, 2024. It is now read-only.
This repository was archived by the owner on Sep 18, 2024. It is now read-only.
There is a XSS vulnerability that can execute javascript #798
Description
Founded in your demo site.
https://demo.gleezcms.org/media/imagecache/resize/20x20//
Visit this address with Firefox browser and it shows a forbidden page
Then insert the payload
<script>alert(1)</script>then u can see this page alert 1 at once.
Obviously, some js code can be executed.