CVE-2024-57329

HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads...

HortusFox 跨站脚本漏洞

HortusFox is a free and open source self-hosted plant manager system from HortusFox, Inc. A cross-site scripting vulnerability exists in HortusFox version 3.9 that stems from a name input field that is not cleaned up or escapes user input, allowing an attacker to inject and execute arbitrary...

CVE-2024-57329

HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads...