Lucene search
K

7 matches found

NVD
NVD
added 2024/10/07 10:15 p.m.9 views

CVE-2024-47817

Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications a...

6.1CVSS0.00363EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/10/07 9:22 p.m.18 views

CVE-2024-47817 Unvalidated paragraph widget values can be used for Cross-site Scripting in lara-zeus

Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications a...

5.3CVSS0.00363EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/10/07 9:22 p.m.9 views

CVE-2024-47817 Unvalidated paragraph widget values can be used for Cross-site Scripting in lara-zeus

Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications a...

5.3CVSS6.2AI score0.00363EPSS
Exploits0References3
CVE
CVE
added 2024/10/07 9:22 p.m.41 views

CVE-2024-47817

The CVE-2024-47817 entry describes an XSS vulnerability in Lara-zeus Dynamic Dashboard and Artemis due to unvalidated values passed to a paragraph widget. Affected versions include Dynamic Dashboard v3.0.0 through v3.0.2; Artemis theme/dash components are also implicated. Root cause: improper val...

6.1CVSS6AI score0.00363EPSS
Exploits0References3
OSV
OSV
added 2024/10/07 9:22 p.m.9 views

CVE-2024-47817 Unvalidated paragraph widget values can be used for Cross-site Scripting in lara-zeus

Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications a...

5.3CVSS6AI score0.00363EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2024/10/07 2:55 p.m.11 views

Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS

Summary If values passed to a paragraph widget are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a paragraph widget is rendered. Versions of dynamic dashboard from v3.0.0 through v3.0.2 are affected. Please...

6.1CVSS6AI score0.00363EPSS
Exploits0References6Affected Software2
CNNVD
CNNVD
added 2024/10/07 12:0 a.m.2 views

Dynamic Dashboard 跨站脚本漏洞

Dynamic Dashboard is an open source dashboard by Lara Zeus. A cross-site scripting vulnerability exists in Dynamic Dashboard. An attacker could exploit this vulnerability to perform a cross-site scripting attack...

6.1CVSS5.8AI score0.00363EPSS
Exploits0References4
Rows per page
Query Builder