CVE-2024-41351

CVE-2024-41351 affects bjyadmin (ThinkPHP-based) via Cross-Site Scripting in Public/statics/umeditor1_2_3/php/getContent.php. Root cause is an XSS vulnerability in that endpoint. CVSS: Network attack vector, Low confidentiality/integrity impact, high user interaction required, scope changed (per ...

CVE-2024-41351: Improper Neutralization of Input During Web Page Generation

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/getContent.php...

CVE-2024-41350: Improper Neutralization of Input During Web Page Generation

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/imageUp.php...

CVE-2024-41350

bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting XSS via Public/statics/umeditor123/php/imageUp.php...

PT-2024-29369 · Bjyadmin · Bjyadmin

Name of the Vulnerable Software and Affected Versions: bjyadmin version a560fd5 Description: The issue is related to Cross Site Scripting XSS in the bjyadmin commit a560fd5. This vulnerability comes from the imageUp.php file located in the Public/statics/umeditor1 2 3/php directory...

CVE-2024-41350

CVE-2024-41350 affects the bjyadmin project (commit a560fd5). The vulnerability is a Cross-Site Scripting (XSS) flaw located in Public/statics/umeditor1_2_3/php/imageUp.php. Root cause involves the imageUp.php component used by bjyadmin, with the impact described as potential XSS (confidentiality...