Threats tagged 'ghsa-425w-xhjg-hfcm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.1	CVE-2024-52947LemonLDAP::NG · Cross-site Scripting (XSS) Vulnerability Medium6.12024-11-18GCVE DatabaseCVE-2024-52947 LemonLDAP::NG versions prior to 2.20.1 contain a cross-site scripting (XSS) vulnerability in the upgrade session confirmation page when the "Upgrade session" plugin is enabled. This flaw allows remote attackers with limited privileges to inject arbitrary web scripts or HTML via the url parameter, potentially leading to script execution in the context of the affected application. Report on CVE-2024-52947 Vulnerability CWE-79 #ghsa-425w-xhjg-hfcm	GCVE Database	2024-11-18

Page 1 of 1