CVE-2024-57329
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.
Vendor
Product
CWE
Yayın Tarihi
2025-01-23 22:15:15
Güncelleme
2025-08-14 20:59:28
Source Identifier
cve@mitre.org
KEV Date Added
-