medium6.1
CVE-2024-34831
cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage…
Impact
cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gibbonedu | Gibbon | Version 26.0.00 |