Security Advisory
CVE-2023-45881
6.1
MEDIUM
Vulnerability Description
GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response.
Published Date
November 14, 2023
Official Source
NIST NVD Advisory