CVE-2024-30929

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php...

CVE-2024-30929

CVE-2024-30929 affects DerbyNet v9.0 and earlier; the vulnerability is a cross-site scripting flaw in the playlist.php back parameter that can lead to arbitrary code execution. The CVSS 3.1 base score is 8.0 (AV:N/AC:L/PR:L/UI:R/S:U/C/H/I/H/A:H). Affected product/versions: DerbyNet 9.0 and below....

CVE-2024-30929

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php...