CVE-2024-29318

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...

CVE-2024-29319

CVE-2024-29319 affects Volmarg Personal Management System 1.4.64, with a server-side request forgery (SSRF) vulnerability triggered by uploading an SVG file. The server can issue unintended HTTP and DNS requests to an attacker-controlled server due to the SVG handling logic. Multiple sources (Red...

CVE-2024-29318

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...

CVE-2024-29319

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...

PT-2024-22858 · Unknown · Volmarg Personal Management System

Name of the Vulnerable Software and Affected Versions: Volmarg Personal Management System version 1.4.64 Description: The issue concerns stored cross site scripting XSS via the upload of an SVG file that contains embedded JavaScript code. This allows for the potential execution of malicious scrip...

CVE-2024-29318: Improper Neutralization of Input During Web Page Generation

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...

CVE-2024-29318

CVE-2024-29318 affects Volmarg Personal Management System (Volmarg PMS) v1.4.64. A stored cross-site scripting (XSS) vulnerability arises when uploading an SVG file that contains embedded JavaScript code, which can lead to script execution in a victim’s session. The root cause is insufficient val...

CVE-2024-29318

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...

CVE-2024-29319

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...