Giter Club home page Giter Club logo

memht's Introduction

MemHT Portal

MemHT Portal - www.memht.com

MemHT is an Open-source PHP CMS and Blog.

You can create and manage your website with MemHT in few and easy steps, it's customizable, expandable and suitable for all your needs.

GPL-2.0 Release date Last release Last commit

GitHub repository links

Repository Link
MemHT Core https://github.com/maned3v/memht
MemHT Extensions https://github.com/maned3v/memht-extensions
MemHT Plugins https://github.com/maned3v/memht-plugins
MemHT Templates https://github.com/maned3v/memht-templates

Release changes

See CHANGES.md

How to install or update MemHT

See install.txt and update.txt

memht's People

Contributors

maned3v avatar memht avatar sisnox avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar

memht's Issues

[Vuln] sXSS in Article comments

Vulnerability Description
Stored attacks are those where the injected script is permanently stored on the target servers.The victim then retrieves the malicious script from the server when it requests the stored information.

Step To Reproduce
Any article comments support bbcode.
When I leave a comment,input[url]javascript:alert('test')[/url],it will cause XSS.

Impact
An XSS attack allows an attacker to execute arbitrary JavaScript in the context of the attacked website and the attacked user. This can be abused to steal session cookies, perform requests in the name of the victim, or for phishing attacks.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.