CVE-2024-48228

CVE-2024-48228 affects funadmin 5.0.2, where the selectfiles method in \backend\controller\sys\Attachh.php directly stores unfiltered parameters/values into the param parameter, causing Cross-Site Scripting (XSS). Multiple connected sources (Red Hat CVE page, GHSA advisory, Veracode, OSV, NVD) co...