CVE-2024-26454

creationtimestamp| type| source ---|---|--- 2024-03-15 02:26:32+00:00| seen| https://t.me/ctinow/208347 2024-03-15 02:31:51+00:00| seen| https://t.me/ctinow/208354...

CVE-2024-26454

CVE-2024-26454 affects Healthcare-Chatbot (version up to 9b7058a). A Cross Site Scripting flaw allows an attacker to inject a crafted payload via the email1 or pwd1 parameter in login.php, enabling client-side script execution. The NVD entry lists CVSS-3.1 base score 5.4 (AV:N/AC:L/PR:L/UI:R/S:C/...