CVE-2024-46278

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting (XSS)2025-04-16 · webapps · multiple

Impact

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/ayato-shitomi/CVE-2024-46278-teedy_1.11_account-takeover
• https://github.com/ayato-shitomi/teedy_1.11_account-takeover