CVE-2024-34831

CVE-2024-34831 XSS Vulnerability in GibbonEdu Core v26.0.00 leading to Privilege Escalation Gibbon is an awesome open source fully fledged school management system. A lot of effort is going on in revamping the rather old code base. Author: Christian Bajada 1. Vulnerability The imageLink parameter...

Malicious code in imagelink (npm)

The package imagelink was found to contain malicious code. --- Credit: OpenSSF source...

EUVD-2024-36332

Malicious code in bioql PyPI...

Malicious code in imagelink (npm)

The package imagelink was found to contain malicious code...

MAL-2025-23067 Malicious code in imagelink (npm)

The package imagelink was found to contain malicious code...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

A cross-site scripting (XSS) vulnerability exists in Gibbon Core v26.0.00 within the library_manage_catalog_editProcess.php component. The root cause is the improper sanitization of the imageLink parameter when editing or submitting new books. An attacker with Manage Catalog permissions can injec...

CVE-2024-34831: Improper Neutralization of Input During Web Page Generation

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

Gibbon security vulnerabilities

Gibbon is a school platform from the Gibbon team that solves real-world problems that educators encounter every day. A security vulnerability exists in Gibbon version v26.0.00, which stems from the presence of a cross-site scripting XSS vulnerability that allows attackers to execute arbitrary cod...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

Cross Site Scripting (XSS)

survey-core is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient sanitization of the imageLink property in questionimage.ts, which allows an attacker to execute malicious scripts via setting contentMode=youtube...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

The SurveyJS Form Library (specifically the survey-core component) is vulnerable to Cross-Site Scripting (XSS) in versions prior to 1.10.4 . The root cause is the insufficient sanitization of the imageLink property within the question_image.ts file, which allows an attacker to execute malicious s...