CVE-2024-25344

ITFlow.org versions prior to commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 are vulnerable to a Cross-Site Scripting (XSS) flaw and a Cross-Site Request Forgery (CSRF) vulnerability. The XSS issue allows a remote attacker to execute arbitrary code and obtain sensitive information via several c...