CVE-2024-37620

PHPVOD v4.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input via the id parameter at the /view/admin/view.php endpoint. This could allow an attacker to execute malicious scripts in the context of a user's browser. As a w...