CVE-2024-25344

ITFlow.org versions prior to commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 are vulnerable to a Cross-Site Scripting (XSS) flaw and a Cross-Site Request Forgery (CSRF) vulnerability. The XSS issue allows a remote attacker to execute arbitrary code and obtain sensitive information via several c...

CVE-2024-25344

Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settingsdefaults.php,settingsintegrations.php,...