CVE-2024-34831: XSS
Published Sep 10, 2024
·Updated
cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component.
Affected Software
2 affected components
Gibbon Core
GibbonEdu Gibbon=26.0.00
Event History
Sep 10, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-34831?
CVE-2024-34831 has a moderate severity level due to its potential for cross-site scripting exploitation.
2
How do I fix CVE-2024-34831?
To fix CVE-2024-34831, sanitize and validate the input for the imageLink parameter in the library_manage_catalog_editProcess.php component.
3
What systems are affected by CVE-2024-34831?
CVE-2024-34831 affects Gibbon Core version 26.0.00.
4
What type of vulnerability is CVE-2024-34831?
CVE-2024-34831 is categorized as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2024-34831 allow for remote code execution?
CVE-2024-34831 can potentially lead to the execution of arbitrary code if exploited.