Cross-site Scripting (XSS) Vulnerability in Cornerstone
CVE-2024-28002
What is CVE-2024-28002?
The identified vulnerability in Archetyped's Cornerstone plugin pertains to improper neutralization of input during web page generation, enabling a reflected Cross-site Scripting (XSS) attack. This vulnerability may allow an attacker to inject malicious scripts into web pages viewed by users. Those using Cornerstone versions from n/a up to 0.8.0 are at risk, as the vulnerability permits an attacker to execute arbitrary JavaScript in the context of a user’s web session. Proper input validation and sanitization measures must be implemented to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Cornerstone <= 0.8.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved