CVE-2024-55417

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...

CVE-2024-55416

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed...

CVE-2024-55416

DevDojo Voyager version 1.8.0 and earlier is vulnerable to reflected Cross-Site Scripting (XSS) via the /admin/compass endpoint. The root cause is improper input sanitization, which allows user-supplied input to be reflected in the response without sufficient encoding or filtering. An authenticat...

PT-2025-1306 · Devdojo · Devdojo Voyager

Name of the Vulnerable Software and Affected Versions: DevDojo Voyager versions 1.8.0 and earlier Description: The issue allows an authenticated user to bypass file type verification when uploading a file via the "/admin/media/upload" endpoint. This can lead to the upload of a web shell, resultin...

ninja-media-script.devdojo.com XSS vulnerability

Open Bug Bounty ID: OBB-239174 Description| Value ---|--- Affected Website:| ninja-media-script.devdojo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

forums.devdojo.com XSS vulnerability

Open Bug Bounty ID: OBB-239172 Description| Value ---|--- Affected Website:| forums.devdojo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

devdojo.com XSS vulnerability

Open Bug Bounty ID: OBB-239167 Description| Value ---|--- Affected Website:| devdojo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...