cve/2024/CVE-2024-29879.md
2025-09-29 21:09:30 +02:00

912 B

CVE-2024-29879

Description

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through  /sentrifugo/index.php/index/getdepartments/format/html, 'business_id' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.

POC

Reference

No PoCs from references.

Github