CVE-2024-34831

CVE-2024-34831 GibbonEdu Core v26.0.00 における XSS 脆弱性、特権昇格につながる Gibbon は優れたオープンソースの本格的な学校管理システムです。かなり古いコードベースを刷新するために多大な努力が払われています。 Author: Christian Bajada 1. 脆弱性 新しい書籍を編集/送信する際の imageLink パラメータ /modules/Library/librarymanagecatalogeditProcess.php は XSS に対して脆弱です。Manage Catalog...

EUVD-2024-36332

Malicious code in bioql PyPI...

MAL-2025-23067 Malicious code in imagelink (npm)

The package imagelink was found to contain malicious code...

Malicious code in imagelink (npm)

The package imagelink was found to contain malicious code...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

A cross-site scripting (XSS) vulnerability exists in Gibbon Core v26.0.00 within the library_manage_catalog_editProcess.php component. The root cause is the improper sanitization of the imageLink parameter when editing or submitting new books. An attacker with Manage Catalog permissions can injec...

Gibbon 安全漏洞

Gibbon is a school platform from the Gibbon team that solves real-world problems that educators encounter every day. A security vulnerability exists in Gibbon version v26.0.00, which stems from the presence of a cross-site scripting XSS vulnerability that allows attackers to execute arbitrary cod...

CVE-2024-34831: Improper Neutralization of Input During Web Page Generation

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

Cross Site Scripting (XSS)

survey-core is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient sanitization of the imageLink property in questionimage.ts, which allows an attacker to execute malicious scripts via setting contentMode=youtube...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

The SurveyJS Form Library is vulnerable to Cross-Site Scripting (XSS) in versions prior to 1.10.4 . The root cause is the insufficient sanitization of the imageLink property within the question_image.ts file. Specifically, an attacker can execute malicious scripts when the contentMode is set to y...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

SurveyJS Form Library 安全漏洞

SurveyJS Form Library is a free client-side component of SurveyJS open source using the MIT license. A security vulnerability exists in SurveyJS Form Library versions prior to 1.10.4 that stems from allowing cross-site scripting attacks via the imageLink attribute...

CVE-2024-36043: Improper Neutralization of Input During Web Page Generation

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

imagelink.uniden.com Cross Site Scripting vulnerability OBB-2143122

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...