CVE-2024-24724

Gibbon versions through 26.0.00 are vulnerable to Server-Side Template Injection (SSTI) , which can lead to Remote Code Execution (RCE) . The flaw exists because the /modules/School Admin/messengerSettings.php endpoint passes unsanitized input to the Twig template engine . Exploitation can occur ...