3 matches found
CVE-2024-27728
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...
6.1CVSS0.00327EPSS
SaveExploits1References2
CVE-2024-27728
The Friendica v.2023.12 software contains a Cross Site Scripting (XSS) vulnerability (CWE-79) within the babel debug feature . A remote attacker can exploit this by interacting with the text parameter to obtain sensitive information from a user's session. As a mitigation, users are advised to dis...
6.1CVSS6.1AI score0.00327EPSS
SaveExploits1References2Affected Software1
20