9 matches found
CVE-2024-29278
funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...
CVE-2024-29278
funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...
CVE-2024-29278
funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...
CVE-2024-29278
funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...
funboot 跨站脚本漏洞
Funboot is a Yii2 based Saas rapid development platform by individual developer peanut funson86. A cross-site scripting vulnerability exists in funboot v1.1, which stems from an easy cross-site scripting attack via the title field in create a message...
CVE-2024-29278
funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...
CVE-2024-29278
funboot v1.1 , a Yii2-based SaaS rapid development platform, is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input in the title field within the "create a message" endpoint, which allows for potential malicious script injection. As a temporary workar...
CVE-2024-29278: Improper Neutralization of Input During Web Page Generation
funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...
PT-2024-22848 · Funboot · Funboot
Name of the Vulnerable Software and Affected Versions: funboot version 1.1 Description: The issue is related to Cross Site Scripting XSS via the title field in the "create a message" endpoint. This allows for potential malicious script injection. Recommendations: For funboot version 1.1, as a...