CVE-2024-23604

FitNesse has multiple CVEs describing a cross-site scripting (CWE-79) vulnerability affecting FitNesse all releases. CVE-2024-23604 (and related CVEs 2024-28039, 2024-28128) allow a remote unauthenticated attacker to cause arbitrary script execution in a user’s browser via a link with crafted par...