CVE-2024-5673
Cross-Site Scripting in PHP File Manager by Dulldusk
Summary
Cross-Site Scripting in PHP File Manager by Dulldusk
Original description
The description as published by the source.
Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fm_current_dir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
References
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es