4 matches found
CVE-2024-30880
Reflected Cross Site Scripting XSS vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple parameter in the image cropping function...
CVE-2024-30880
Reflected Cross Site Scripting XSS vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple parameter in the image cropping function...
CVE-2024-30880
The RageFrame2 rapid development application engine (version v2.6.43 ) is vulnerable to a Reflected Cross Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically involving the multiple parameter within the image cropping function ...
CVE-2024-30880
Reflected Cross Site Scripting XSS vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple parameter in the image cropping function...