CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

CVE-2024-30927

DerbyNet versions 9.0 and below are vulnerable to a Cross-Site Scripting (XSS) vulnerability within the racer-results.php component. The root cause is the improper validation of user-supplied input specifically involving the racerid parameter. An attacker can exploit this to execute arbitrary cod...