### [CVE-2024-56918](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56918)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)

### Description

In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to exfiltrate user input from the login form.

### POC

#### Reference
- https://youtu.be/GC8-PUlu2i8?si=cd_dSVno93pCisr-&t=103

#### Github
No PoCs found on GitHub currently.