cve/2022/CVE-2022-45543.md

CVE-2022-45543

Description

Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search.

POC

Reference

• https://srpopty.github.io/2023/02/15/Vulnerability-Discuz-X3.4-Reflected-XSS-(CVE-2022-45543)/

Github

• https://github.com/Srpopty/Corax
• https://github.com/TheKingOfDuck/SBCVE