CVE-2024-32343

Boid CMS version v2.1.0 is susceptible to a cross-site scripting (XSS) vulnerability within the Create Page functionality. The root cause is the improper neutralization of input, allowing an attacker to inject a crafted payload into the Content parameter to execute arbitrary web scripts or HTML. ...