Reflected XSS Vulnerability in eewee Admin Custom

CVE-2024-51780

Summary

A vulnerability exists in the eewee Admin Custom plugin developed by Michael DUMONTET, specifically related to improper neutralization of input during web page generation leading to reflected Cross-Site Scripting (XSS). This flaw can be exploited by attackers to inject malicious scripts into web pages viewed by unsuspecting users, which may allow for session hijacking, defacement, or the dissemination of malware. The affected versions range from n/a through 1.8.2.4, making it critical for users to review and update their installations to mitigate potential security risks.

References