ICEcoder vulnerable to Cross Site Scripting

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-41375 · ADVISORY
• icecoder/ICEcoder · PACKAGE
• xjzzzxx/vulFound · WEB

icecoder/icecoder 的其他漏洞

• CVE-2024-41374中危 6.1ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php
• CVE-2024-41373中危 6.3ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.
• CVE-2022-34026高危 7.5ICEcoder v8.1 allows attackers to execute a directory traversal.
• CVE-2021-3862中危 4.8icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-32106中危 5.4In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the…