cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...
6.1CVSS0.00855EPSS
SaveExploits2References1
OSV•added 2024/03/13 1:15 p.m.•6 views
CVE-2024-28430
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...