CVE-2024-44793: XSS
Published Aug 26, 2024
·Updated
A cross-site scripting (XSS) vulnerability in the component /managers/multiplefreeleech.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the torrents parameter.
Affected Software
1 affected component
Gazelle Project Gazelle<2016-11-08
Event History
Aug 26, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-44793?
CVE-2024-44793 is classified as a high severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2024-44793?
To fix CVE-2024-44793, validate and sanitize user input in the torrents parameter to prevent XSS attacks.
3
What component is affected by CVE-2024-44793?
CVE-2024-44793 affects the /managers/multiple_freeleech.php component of Gazelle.
4
Who can exploit CVE-2024-44793?
Any attacker with the ability to send crafted payloads to the affected component can exploit CVE-2024-44793.
5
What versions of Gazelle are vulnerable to CVE-2024-44793?
Gazelle versions prior to 2016-11-08 are vulnerable to CVE-2024-44793.