Description
The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code.
High · 7.6
CVE-2024-28434
EUVD-2024-25531GHSA-x7hp-f23m-66mj
The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the e…
Published Mar 25, 2024 · Updated Aug 28, 2024 · Assigned by mitre