← Database

CVE-2024-40500

HIGH CVSS: 8.6 Published: 2024-08-12 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component.

Affected Platforms

Scilico I\, Librarian

Weakness Type

CWE-79, CWE-79

References