CVE-2024-25875

Enhavo CMS v0.13.1 is vulnerable to a Cross-Site Scripting (XSS) flaw within its Header module . The root cause is insufficient input validation in the Undertitle text field, which allows an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload. This could potentially...