← Back to CVE List
CVE-2024-25801
Published:
2024-02-22T05:15Z
Last Modified:
2025-03-13T16:15Z
Source:
MITRE CVE List
License:
MITRE-CVE-TOS
SKINsoft S-Museum 7.02.3 allows XSS via the filename of an uploaded file. Unlike in CVE-2024-25802, the attack payload is in the name (not the content) of a file. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt