VYPR
Moderate severityNVD Advisory· Published Mar 22, 2024· Updated Aug 28, 2024

CVE-2024-29271

CVE-2024-29271

Description

Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
vvvebjsnpm
< 1.7.51.7.5

Affected products

2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.