10 matches found
CVE-2023-37786: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Mail Settingsbackend, Mail Settingshost, Mail Settingsport and Mail Settingsauth parameters of the /admin/configuration.php...
4.8CVSS6AI score0.00532EPSS
SaveExploits1References2
20