CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

funboot 跨站脚本漏洞

Funboot is a Yii2 based Saas rapid development platform by individual developer peanut funson86. A cross-site scripting vulnerability exists in funboot v1.1, which stems from an easy cross-site scripting attack via the title field in create a message...

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

CVE-2024-29278

The funboot SaaS rapid development platform (v1.1), based on Yii2, is vulnerable to a Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input in the title field within the "create a message" endpoint, which allows for malicious script injection. As a tempo...

PT-2024-22848 · Funboot · Funboot

Name of the Vulnerable Software and Affected Versions: funboot version 1.1 Description: The issue is related to Cross Site Scripting XSS via the title field in the "create a message" endpoint. This allows for potential malicious script injection. Recommendations: For funboot version 1.1, as a...