CVE-2023-5024

漏洞标题：PLANNO 23.04.04 评论跨站脚本 漏洞作者：Angel Metz AKA PH03N1XSP 厂商主页：Planno 软件链接：GitHub - PlanningBiblio 版本：alert1;） 4. 输入脚本后，即可触发反射型 XSS。 第二种路径 1. 使用你的凭据登录。 2. 转到右上角，点击"Enregistrer comme modele"。 3. 在"Nom du module"中，编写恶意脚本以触发反射型 XSS（"alert1;），然后点击"Enregistrer"。 4. 输入脚本后，即可触发反射型 XSS。 你可以通过以下链接了解更多信息：...

EUVD-2023-57370

Malicious code in bioql PyPI...

CVE-2023-5024

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

Exploit for Cross-site Scripting in Planno Planning_Biblio

Exploit Title: PLANNO 23.04.04 COMMENT CROSS SITE SCRIPTING -...

CVE-2023-5024

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

Cross site scripting

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-5024 Planno Comment cross site scripting

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-5024 Planno Comment cross site scripting

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-5024

CVE-2023-5024 affects Planno 23.04.04, specifically the Comment Handler component, where manipulation can cause cross-site scripting. The vulnerability can be triggered remotely and public exploit guidance exists (e.g., GitHub exploit for PLANNO 23.04.04 Comment Cross Site Scripting). Connected s...

CVE-2023-5024 Planno Comment cross site scripting

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

Planno Cross-Site Scripting Vulnerability

Planno is an AI-powered solar development platform from Planno. A cross-site scripting vulnerability exists in Planno version 23.04.04, which stems from a cross-site scripting XSS vulnerability in the component Comment Handler...

CVE-2023-5024: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

PT-2023-31503 · Planno · Planno

Name of the Vulnerable Software and Affected Versions: Planno version 23.04.04 Description: A problematic issue affects an unknown part of the component Comment Handler, leading to cross-site scripting. The manipulation can be initiated remotely. Recommendations: For Planno version 23.04.04, at t...