CVE-2024-26481

creationtimestamp| type| source ---|---|--- 2024-02-22 06:26:45+00:00| seen| https://t.me/ctinow/190447 2024-02-22 06:27:01+00:00| seen| https://t.me/ctinow/190457 2024-03-13 12:36:51+00:00| seen| https://t.me/ctinow/206633...

CVE-2024-26481

Kirby CMS v4.1.0 was discovered to contain a reflected self-XSS vulnerability via the URL parameter...

CVE-2024-26481

Kirby CMS v4.1.0 contains a reflected self-XSS (self-cross-site scripting) vulnerability within the URL field used in blueprints. The root cause is a lack of validation or sanitization when the application copies the entered URL into the link target of the link button. An attacker could use a jav...