CVE-2024-56361 Stored Cross-Site Scripting (XSS) in lgsl v7.0

LGSL Live Game Server List provides online status for games. Before 7.0.0, a stored cross-site scripting XSS vulnerability was identified in lgsl. The function lgslquery40 in lgslprotocol.php has implemented an HTTP crawler. This function makes a request to the registered game server, and upon...

CVE-2024-56361

LGSL (Live Game Server List) version before 7.0.0 is affected by a stored XSS vulnerability via the lgsl_query_40 HTTP crawler. The crawler requests the /info endpoint on registered game servers, and the payload is rendered on the info page (displayed through lgsl_details.php), enabling execution...