CVE-2024-39828

R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modified saved-game file. This was fixed in a hotfix to 1.9.5 on 2024-06-29...

CVE-2024-39828: Improper Neutralization of Input During Web Page Generation

R74n Sandboxels 1.9 through 1.9.5 allows XSS via a message in a modified saved-game file. This was fixed in a hotfix to 1.9.5 on 2024-06-29...

CVE-2024-39828

R74n Sandboxels versions 1.9 through 1.9.5 are vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input when processing a message within a modified saved-game file . An attacker exploiting this could execute malicious scripts in the context of the user's s...