CVE-2024-25873

creationtimestamp| type| source ---|---|--- 2024-02-22 15:26:41+00:00| seen| https://t.me/ctinow/190805 2024-02-22 15:26:52+00:00| seen| https://t.me/ctinow/190816...

CVE-2024-25873

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

CVE-2024-25873

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

CVE-2024-25873

The Enhavo CMS (version v0.13.1 ) contains an HTML injection vulnerability (CWE-80) located in the Author text field of the Blockquote module. A specially crafted payload can be used by an attacker to execute arbitrary code. As a temporary workaround, it is recommended to disable the Author text ...

CVE-2024-25873

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a crafted payload...