CVE-2024-57329
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com