CVE-2024-34831

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-09-10 · updated 2026-06-17
Weakness: CWE-79

Description

cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component.

Affected products

gibbonedu gibbon: 26.0.00

References

https://github.com/enzored/CVE-2024-34831

Get alerted when CVE-2024-34831 or the next vulnerability affects your stack