CVE-2024-0718

CVE-2024-0718 describes a cross-site scripting vulnerability in liuwy-dlsdys zhglxt v4.7.7, affecting the /oa/notify/edit endpoint. The issue arises from user-controlled input in the notifyTitle parameter of the HTTP POST Request Handler, enabling remote exploitation. Public disclosures exist. Co...