CVE-2024-25807

Cross Site Scripting XSS vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain sensitive information via the title parameter when creating an album...

CVE-2024-25807

Cross Site Scripting XSS vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain sensitive information via the title parameter when creating an album...

CVE-2024-25807

A Cross Site Scripting (XSS) vulnerability exists in Lychee version 3.1.6 , an open-source photo management system. The flaw is located in the title parameter used during the album creation process. Remote attackers can exploit this to execute arbitrary code and obtain sensitive information. As o...