CVE-2024-26521

Published: 2024-03-12T05:15Z

Last Modified: 2024-11-21T09:02Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the english.php component. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt