| |
Vulnerability CVE-2024-30950
Published: 2024-04-17
| Description: |
A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /adm/admsql.php. |
References: |
https://github.com/CrownZTX/vulnerabilities/blob/main/fudforum/stored_xss_in_admsql.md
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
