critical9.8
CVE-2024-29401
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.
Impact
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mindskip | Xzs-Mysql | Version 3.8 |