Lucene search
+L

4 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•5 views

CVE-2024-24724: Improper Neutralization of Special Elements Used in a Template Engine

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine messengerSettings.php without sanitization...

9.8CVSS5.9AI score0.26089EPSS
SaveExploits4References2
Rows per page
Query Builder