CVE-2024-27278
OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profi…
Published: 2024-03-05 · CVSS: 5.4 · CVSS 3.1
OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitrary script may be executed on the web browsers of other users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7