ICEcoder vulnerable to Cross Site Scripting

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-41374 · ADVISORY
• icecoder/ICEcoder · PACKAGE
• xjzzzxx/vulFound · WEB

Weitere Schwachstellen in icecoder/icecoder

• CVE-2024-41375MITTEL 6.1ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
• CVE-2024-41373MITTEL 6.3ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.
• CVE-2022-34026HOCH 7.5ICEcoder v8.1 allows attackers to execute a directory traversal.
• CVE-2021-3862MITTEL 4.8icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-32106MITTEL 5.4In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the…