{ "id": "CVE-2024-26473", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-29T01:44:19.043", "lastModified": "2024-02-29T13:49:29.390", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "A reflected cross-site scripting (XSS) vulnerability in SocialMediaWebsite v1.0.1 allows attackers to inject malicious JavaScript into the web browser of a victim via the poll parameter in poll.php." }, { "lang": "es", "value": "Una vulnerabilidad de Cross-Site Scripting (XSS) reflejada en SocialMediaWebsite v1.0.1 permite a los atacantes inyectar JavaScript malicioso en el navegador web de una v\u00edctima a trav\u00e9s del par\u00e1metro de encuesta en poll.php. " } ], "metrics": {}, "references": [ { "url": "https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2024-26473", "source": "cve@mitre.org" }, { "url": "https://github.com/msaad1999/KLiK-SocialMediaWebsite/", "source": "cve@mitre.org" } ] }