CVE-2024-27665

CVE-2024-27665 O Unifiedtransform v2.X é vulnerável a Cross-Site Scripting XSS Armazenado através do recurso de upload de arquivos no módulo Syllabus. Fornecedor: https://github.com/changeweb/Unifiedtransform PoC Passo 1: Faça login no aplicativo e navegue até o módulo Acadêmico. Passo 2: Crie...

CVE-2024-27665

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...

CVE-2024-27665

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...

CVE-2024-27665

Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module...

PT-2024-21983 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform versions 2.X Description: The issue is related to Stored Cross-Site Scripting XSS via the file upload feature in the Syllabus module. This allows for malicious scripts to be stored and executed on the server. No information i...