CVE-2024-48392

OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript code into user email due to lack of input validation, which could lead to account takeover...

CVE-2024-48392

creationtimestamp| type| source ---|---|--- 2025-01-21 21:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrkp7vlm2f 2025-01-22 21:02:00+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lgebayyrpe24 2025-01-22 22:02:24+00:00|...

CVE-2024-48392

OrangeScrum version 2.0.11 is vulnerable to a Cross-Site Scripting (XSS) vulnerability caused by a lack of effective filtering and escaping of user-supplied data. An attacker can exploit this by injecting malicious JavaScript code into user emails, which may lead to account takeover . This issue ...