Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:05 a.m.•17 views

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

6.5CVSS6AI score0.00435EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/30 1:15 a.m.•13 views

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

6.5CVSS5.8AI score0.00435EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/30 1:15 a.m.•17 views

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

6.5CVSS5.7AI score0.00435EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/30 12:00 a.m.•13 views

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

5.7AI score0.00435EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/30 12:00 a.m.•16 views

funboot 跨站脚本漏洞

Funboot is a Yii2 based Saas rapid development platform by individual developer peanut funson86. A cross-site scripting vulnerability exists in funboot v1.1, which stems from an easy cross-site scripting attack via the title field in create a message...

6.5CVSS6.2AI score0.00435EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/30 12:00 a.m.•27 views

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

5.9AI score0.00435EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/30 12:00 a.m.•43 views

CVE-2024-29278

funboot v1.1 , a Yii2-based SaaS rapid development platform, is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input in the title field within the "create a message" endpoint, which allows for potential malicious script injection. As a temporary workar...

6.5CVSS6AI score0.00435EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/30 12:00 a.m.•4 views

CVE-2024-29278: Improper Neutralization of Input During Web Page Generation

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

6.5CVSS5.8AI score0.00435EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/30 12:00 a.m.•15 views

PT-2024-22848 · Funboot · Funboot

Name of the Vulnerable Software and Affected Versions: funboot version 1.1 Description: The issue is related to Cross Site Scripting XSS via the title field in the "create a message" endpoint. This allows for potential malicious script injection. Recommendations: For funboot version 1.1, as a...

6.5CVSS6.7AI score0.00435EPSS
SaveExploits0References4
Rows per page
Query Builder