CVE-2024-30926

The DerbyNet match broadcasting program (versions 9.0 and below ) is affected by a Cross-Site Scripting (XSS) vulnerability within the ./inc/kiosks.inc component. This flaw can be exploited by an attacker to execute arbitrary code or steal a victim's cookie-based authentication credentials . No s...