CVE-2024-33253

MEDIUM Year: 2024
CVSS v3 Score
6.0
Medium
Weakness Type
CWE-79
View all →

Vulnerability Description

Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged attacker to execute arbitrary code via the title and description fields of the badge template editing function.

Related Vulnerabilities

CVE-2019-20639

MEDIUM
CVSS:6.0(Medium)

Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.

CWE-792019

CVE-2019-20660

MEDIUM
CVSS:6.0(Medium)

Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.3...

CWE-792019

CVE-2019-20661

MEDIUM
CVSS:6.0(Medium)

Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.

CWE-792019

CVE-2019-20662

MEDIUM
CVSS:6.0(Medium)

Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.

CWE-792019

CVE-2019-20663

MEDIUM
CVSS:6.0(Medium)

Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.

CWE-792019

CVE-2019-20664

MEDIUM
CVSS:6.0(Medium)

Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.3...

CWE-792019