Filtered by vendor Gibbon
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-34831 | 2 Gibbon, Gibbonedu | 2 Core, Gibbon | 2025-07-17 | 6.1 Medium |
cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component. | ||||
CVE-2024-51337 | 2 Gibbon, Gibbonedu | 2 Core, Gibbon | 2025-07-17 | 3.5 Low |
Cross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a remote attacker to obtain sensitive information via the email parameter found in /Gibbon/modules/User Admin/user_manage_editProcess.php. |
Page 1 of 1.