Information disclosure

FlyCms through abbaa5a allows XSS via the permission management feature...

CVE-2024-21732

The CVE-2024-21732 entry concerns FlyCms using commit abbaa5a, where an XSS flaw is exposed through the permission management feature. The advisory indicates that an attacker can exploit this via a reflected or stored XSS path within the permission management UI, with CVSS v3.1 metrics: AV:N/AC:L...