Description
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.
Medium · 5.4
CVE-2024-57329
EUVD-2024-53565GHSA-qcjj-7w9p-r3m9
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user input…
Published Jan 23, 2025 · Updated Jan 24, 2025 · Assigned by mitre