CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2024/03/30 1:15 a.m.•7 views

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

6.5CVSS5.7AI score0.0015EPSS

Exploits0References2

Cvelist•added 2024/03/30 12:0 a.m.•13 views

CVE-2024-29278

funboot v1.1 is vulnerable to Cross Site Scripting XSS via the title field in "create a message ."...

5.9AI score0.0015EPSS

Exploits0References2

CVE•added 2024/03/30 12:0 a.m.•27 views

CVE-2024-29278

CVE-2024-29278 affects funboot v1.1 with a Cross Site Scripting (XSS) flaw in the title field of the “create a message” endpoint. The root cause is input handling in the title parameter that allows script injection, enabling potential user-facing XSS. The CVSS 3.1 base metrics given (AV:N/AC:L/PR...

6.5CVSS6AI score0.0015EPSS

Exploits0References2