Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-29273 EUVD-2024-26285GHSA-35j4-3hfm-6mj2

There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document.

Published Mar 22, 2024 · Updated Aug 27, 2024 · Assigned by mitre