CVE-2024-27757

flusity CMS through 2.45 allows tools/addonsmodel.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024."...

CVE-2024-27757

flusity CMS versions through 2.45 are vulnerable to a Cross-Site Scripting (XSS) flaw in the tools/addons_model.php file via the Gallery Name parameter. This vulnerability allows an attacker to execute malicious scripts in a user's browser during interaction with the affected component. Due to th...