2 matches found
CVE-2024-55009: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame&WCU= parameter...
6.1CVSS6.1AI score0.00429EPSS
SaveExploits1References1
PT-2025-11974
Name of the Vulnerable Software and Affected Versions AutoBib - Bibliographic collection management system versions 3.1.140 and earlier Description A reflected cross-site scripting XSS issue allows attackers to execute arbitrary Javascript in the context of a victim's browser. This is achieved by...
6.1CVSS0.00429EPSS
SaveExploits1References9
20