GHSA-PC95-3WGM-X28P VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability

A reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.5 allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability

A reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.5 allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

CVE-2024-29272

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

CVE-2024-29271

Reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator for Givan Personal Developers. A security vulnerability exists in VvvebJs prior to version 1.7.7, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that allows remote attackers to execute arbitrary code and obtain...

CVE-2024-29271

A Reflected Cross-Site Scripting (XSS) vulnerability exists in VvvebJs prior to version 1.7.7 . The flaw allows remote attackers to execute arbitrary code and obtain sensitive information by exploiting the action parameter in the save.php file. Exploitation details regarding specific in-the-wild ...

CVE-2024-29271

Reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

CVE-2024-29272

VvvebJs, a drag-and-drop website generator, contains an arbitrary file upload vulnerability in versions prior to 1.7.5 (with some sources citing prior to 1.7.7). The root cause is located in the sanitizeFileName parameter within the save.php file, which allows unauthenticated remote attackers to ...

CVE-2024-29272

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

CVE-2024-29272: Unrestricted Upload of File with Dangerous Type

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

CVE-2024-29272

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator for Givan Personal Developers. A security vulnerability exists in VvvebJs prior to version 1.7.7, which stems from an arbitrary file upload vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code and obtain sensitive...

CVE-2024-29271

Reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

CVE-2024-29272

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php...

CVE-2024-29271

Reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

CVE-2024-29271: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php...

PT-2024-22844 · Vvvebjs · Vvvebjs

Name of the Vulnerable Software and Affected Versions: VvvebJs versions prior to 1.7.5 Description: The issue allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in the "save.php" file. This enables remote attacks,...

PT-2024-22843 · Vvvebjs · Vvvebjs

Name of the Vulnerable Software and Affected Versions: VvvebJs versions prior to 1.7.7 Description: A Reflected Cross-Site Scripting XSS issue allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in "save.php". This enables attackers to perfo...