Lucene search
+L

3 matches found

NVD
NVD
•added 2024/03/19 9:15 p.m.•19 views

CVE-2024-24336

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

8.1CVSS5.8AI score0.00363EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/19 12:00 a.m.•1 views

CVE-2024-24336: Cross-Site Request Forgery (CSRF)

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

8.1CVSS5.7AI score0.00363EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/03/19 12:00 a.m.•24 views

CVE-2024-24336

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

6AI score0.00363EPSS
SaveExploits0References2
Rows per page
Query Builder