CVE-2024-37620

The open-source application PHPVOD v4.0 contains a reflected cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input via the id parameter at the /view/admin/view.php endpoint. This flaw allows an attacker to execute malicious scripts in a user's browser. A...