CVE-2024-34831

A cross-site scripting (XSS) vulnerability exists in Gibbon Core v26.0.00 within the library_manage_catalog_editProcess.php component. The root cause is the improper sanitization of the imageLink parameter when editing or submitting new books. An attacker with Manage Catalog permissions can injec...