CVE-2024-26521

CE Phoenix v1.0.8.20 and earlier are affected by an HTML Injection vulnerability in the english.php component. The root cause is insufficient neutralization of special symbols, enabling a remote attacker to execute arbitrary code, escalate privileges, and access sensitive data. Affected versions ...

CVE-2024-26521

creationtimestamp| type| source ---|---|--- 2024-03-02 11:17:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6709 2024-03-02 23:43:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10077 2024-03-03 01:06:33+00:00| published-proof-of-concept|...