Medium · 4.7 CVE-2024-37844 EUVD-2024-36843GHSA-jxjm-crgh-jq3f

A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scripts or HTML via a c…

Published Oct 25, 2024 · Updated Oct 28, 2024 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

References

https://github.com/herombey/Disclosures/tree/main
https://github.com/herombey/Disclosures/blob/main/CVE-2024-37844%20XSS.pdf