{ "id": "CVE-2024-53599", "sourceIdentifier": "cve@mitre.org", "published": "2024-11-25T19:15:11.957", "lastModified": "2024-11-25T19:15:11.957", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "A cross-site scripting (XSS) vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload." } ], "metrics": {}, "references": [ { "url": "https://github.com/NoPurposeInLife/vulnerability_research/tree/main/CVE-2024-53599", "source": "cve@mitre.org" } ] }