4 matches found
CVE-2024-30920
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...
7.4CVSS7.3AI score0.01027EPSS
SaveExploits2References1
CVE-2024-30920
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the render-document.php component...
7.4CVSS7AI score0.01027EPSS
SaveExploits2References2
CVE-2024-30920
CVE-2024-30920 is a Cross Site Scripting (XSS) vulnerability in DerbyNet v9.0 and earlier, enabling a remote attacker to execute arbitrary code via the render-document.php component. The root cause cited is improper sanitization of user input in document rendering paths (exposure of debug informa...
7.4CVSS7.2AI score0.01027EPSS
SaveExploits2References2Affected Software1
20