← CVE Intelligence

CVE-2024-27278

OpenPNE Project / OpenPNE Plugin "opTimelinePlugin" PUBLISHED

Description (CNA)

OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitrary script may be executed on the web browsers of other users.

Affected (CNA)

Vendor / productVersions
OpenPNE Project / OpenPNE Plugin "opTimelinePlugin"affected 1.2.11 and earlier

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.