CVE-2024-37620

CVE-2024-37620 affects PHPVOD v4.0, with a reflected XSS vulnerability in the id parameter of /view/admin/view.php. The issue arises from untrusted input reflected in the response, enabling script execution in the context of the victim’s browser. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I...