CVE-2025-24966

reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary HTML code. In this scenario, the vulnerability exists in the "Add Target" functionality of the...

CVE-2025-24966

creationtimestamp| type| source ---|---|--- 2025-02-04 19:33:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113947287754913671 2025-02-04 20:16:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheuravl5n2c 2025-02-04 22:15:14+00:00| seen|...

CVE-2025-24966

CVE-2025-24966 concerns the reNgine web-app reconnaissance framework. The issue is HTML Injection in the Add Target functionality, where the Target Organization and Target Description fields improperly validate or sanitize input, allowing arbitrary HTML payloads. The injected HTML is rendered in ...