cve/2024/CVE-2024-29878.md
2025-09-29 21:09:30 +02:00

897 B

CVE-2024-29878

Description

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/sitepreference/add, 'description' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.

POC

Reference

No PoCs from references.

Github