CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

Gibbon 安全漏洞

Gibbon is a school platform from the Gibbon team that solves real-world problems that educators encounter every day. A security vulnerability exists in Gibbon version v26.0.00, which stems from the presence of a cross-site scripting XSS vulnerability that allows attackers to execute arbitrary cod...

CVE-2024-34831

A cross-site scripting (XSS) vulnerability exists in Gibbon Core v26.0.00 within the library_manage_catalog_editProcess.php component. The root cause is the improper sanitization of the imageLink parameter when editing or submitting new books. An attacker with Manage Catalog permissions can injec...