Description
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php component.
Medium · 5.4
CVE-2024-30921
EUVD-2024-28839GHSA-3g64-2wg6-7p8r
Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the photo.php componen…
Published Apr 18, 2024 · Updated Nov 4, 2025 · Assigned by mitre