CVE-2024-27278
Assigner: jpcert
Published: 2024-03-05T23:49:14.943Z
State: PUBLISHED
affected: vendor: OpenPNE Project
product: OpenPNE Plugin "opTimelinePlugin"
versions: version: 1.2.11 and earlier
status: affected
descriptions: value: OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitrary script may be executed on the web browsers of other users.
problemTypes: descriptions: description: Cross-site scripting (XSS)
type: text