📄 Teedy 1.11 Cross Site Scripting

Teedy version 1.11 suffers from a persistent cross site scripting vulnerability. Exploit Title: Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting XSS Exploit Author: Ayato Shitomi @ Fore-Z co.ltd Demo Video: https://www.youtube.com/watch?v=udQgVogsmhA Vendor Homepage: https://teedy.io...

Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting (XSS)

Exploit Title: Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting XSS Exploit Author: Ayato Shitomi @ Fore-Z co.ltd Demo Video: https://www.youtube.com/watch?v=udQgVogsmhA Vendor Homepage: https://teedy.io/ Software Link: https://github.com/Tomblib0/Teedy Version: 1.11 Tested on: Linux...

CVE-2024-46278

creationtimestamp| type| source ---|---|--- 2024-10-07 19:18:42+00:00| seen| https://t.me/cvedetector/7250 2025-04-17 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvz4mja2a...

CVE-2024-46278

Teedy version 1.11 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within its management console. The vulnerability occurs when downloading files, allowing an attacker to execute malicious scripts. If an administrator views a file uploaded by an attacker, the script can perform actions ...