5 matches found
CVE-2024-55279
Uguu through 1.8.9 allows Cross Site Scripting XSS via JavaScript in XML files...
6CVSS6.3AI score0.00286EPSS
SaveExploits1References1
CVE-2024-55279
creationtimestamp| type| source ---|---|--- 2025-03-24 16:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll56zvshem26 2025-03-24 18:24:37+00:00| seen| https://t.me/cvedetector/20983 2025-04-01 18:33:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9...
6CVSS4.8AI score0.00286EPSS
SaveExploits1References3
CVE-2024-55279
Uguu versions 1.8.9 and earlier are vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. Specifically, the software allows the execution of JavaScript within XML files , which could lead to unauthorized script execution. As a workaround,...
6CVSS6.3AI score0.00286EPSS
SaveExploits1References2Affected Software1
20