ICEcoder vulnerable to Cross Site Scripting

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-41374 · ADVISORY
• icecoder/ICEcoder · PACKAGE
• xjzzzxx/vulFound · WEB

Autres vulnérabilités de icecoder/icecoder

• CVE-2024-41375MOYENNE 6.1ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
• CVE-2024-41373MOYENNE 6.3ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.
• CVE-2022-34026ÉLEVÉE 7.5ICEcoder v8.1 allows attackers to execute a directory traversal.
• CVE-2021-3862MOYENNE 4.8icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-32106MOYENNE 5.4In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the…