CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

A cross-site scripting (XSS) vulnerability exists in Gibbon Core v26.0.00 within the library_manage_catalog_editProcess.php component. The root cause is the improper sanitization of the imageLink parameter when editing or submitting new books. An attacker with Manage Catalog permissions can injec...

CVE-2024-34831: Improper Neutralization of Input During Web Page Generation

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

PT-2024-26228 · Unknown · Gibbon Core

Name of the Vulnerable Software and Affected Versions: Gibbon Core version 26.0.00 Description: A cross-site scripting XSS issue allows an attacker to execute arbitrary code via the imageLink parameter in the library manage catalog editProcess.php component. This could potentially lead to...