medium5.4
CVE-2023-45879
GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component.
Impact
GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gibbonedu | Gibbon | through 25.0.00 |