CVE-2024-25876

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...

CVE-2024-25876

The Enhavo CMS version v0.13.1 is affected by a cross-site scripting (XSS) vulnerability within the Header module . An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the Title text field . To mitigate this risk, it is recommended to disable the Header modul...