人工智能 QbiBot 智能機器人- Stored XSS

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-7969-7827e-1.html
• https://www.twcert.org.tw/en/cp-139-7975-3e810-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2024-7204
• https://avd.aliyun.com/detail?id=AVD-2024-7204
• https://www.twcert.org.tw/newepaper/cp-151-7969-7827e-3.html

Related Vulnerabilities

• Hepta Platforms｜Heptabase - Stored Cross-Site Scripting
• PoCCVE-2026-1115: parisneo/lollms < 2.2.0 - Authenticated Stored XSS
• PoCwp-livechat-stored-xss: WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS
• PoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API
• PoCCVE-2024-3231: Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
• PoCCVE-2025-1232: Site Reviews < 7.2.5 - Unauthenticated Stored XSS
• PoCCVE-2024-37259: WP Extended < 3.0.0 - Stored Cross-Site Scripting
• PoCCVE-2016-15041: MainWP Dashboard <= 3.1.2 - Stored Cross-Site Scripting
• PoCCVE-2012-10018: WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload
• PoCCVE-2021-24657: Limit Login Attempts WordPress - Stored Cross-site Scripting
• PoCCVE-2021-24681: Duplicate Page WordPress - Stored Cross-Site Scripting
• PoCCVE-2022-1029: Limit Login Attempts - Stored Cross-Site Scripting
• PoCCVE-2022-38130: KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution