cve/2024/CVE-2024-37879.md
2025-09-29 21:09:30 +02:00

673 B

CVE-2024-37879

Description

Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo".

POC

Reference

No PoCs from references.

Github