Gibbon Security Vulnerabilities and Issues — Gibbon CVE List

Lucene search

GibboneduGibbon

4 matches found

CVE•added 2024/09/10 6:15 p.m.•38 views

CVE-2024-34831

cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component.

6.1CVSS6.2AI score0.00412EPSS

CVE•added 2023/06/29 3:15 p.m.•37 views

CVE-2023-34599

Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code.

6.1CVSS6.3AI score0.39485EPSS

CVE•added 2021/09/03 5:15 p.m.•36 views

CVE-2021-40492

A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents to index.php).

6.1CVSS6.1AI score0.15296EPSS

CVE•added 2023/11/14 6:15 a.m.•18 views

CVE-2023-45881

GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response.

6.1CVSS6.2AI score0.00259EPSS