CVE-2024-1146

Published: 2024-03-19T12:15Z

Last Modified: 2024-11-21T08:49Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt