← Database

CVE-2024-51337

LOW CVSS: 3.5 Published: 2024-11-21 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a remote attacker to obtain sensitive information via the email parameter found in /Gibbon/modules/User Admin/user_manage_editProcess.php.

Affected Platforms

Gibbonedu Gibbon

Weakness Type

CWE-79

References