CVE-2024-7124

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in...

CVE-2024-7124

CVE-2024-7124 affects DInGO dLibra software (versions 6.0–6.3.19). The vulnerability is a Reflected Cross-Site Scripting (XSS) in the indexsearch endpoint’s filter parameter, caused by improper neutralization of input during web page generation. Exploitation would require a user to click a crafte...