CVE-2024-30920

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...

CVE-2024-30920

A Cross-Site Scripting (XSS) vulnerability exists in DerbyNet v9.0 and below within the render-document.php component. The root cause is the application's failure to properly sanitize user input in document rendering paths, specifically when displaying debug information such as ORIG_SCRIPT_FILENA...