cve/2024/CVE-2024-26472.md
2024-05-25 21:48:12 +02:00

768 B

CVE-2024-26472

Description

KLiK SocialMediaWebsite version 1.0.1 from msaad1999 has a reflected cross-site scripting (XSS) vulnerability which may allow remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' or 'validator' parameters of 'create-new-pwd.php'.

POC

Reference

No PoCs from references.

Github