Логотип exploitDog
bind:CVE-2024-29878
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-29878

Количество 2

Количество 2

nvd логотип

CVE-2024-29878

почти 2 года назад

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/sitepreference/add, 'description' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.

CVSS3: 7.1
EPSS: Низкий
github логотип

GHSA-2vwx-x49m-q6hr

почти 2 года назад

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/sitepreference/add, 'description' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.

CVSS3: 7.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-29878

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/sitepreference/add, 'description' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.

CVSS3: 7.1
0%
Низкий
почти 2 года назад
github логотип
GHSA-2vwx-x49m-q6hr

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/sitepreference/add, 'description' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.

CVSS3: 7.1
0%
Низкий
почти 2 года назад

Уязвимостей на страницу