Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2024-34831

cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Gibbon Gibbonedu
Products
Core Gibbon
CVE-2024-51337

Cross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a remote attacker to obtain sensitive information via the email parameter found in /Gibbon/modules/User Admin/user_manage_editProcess.php.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Gibbon Gibbonedu
Products
Core Gibbon