PoC Index85,101 CVEs with PoCs

CVE-2024-57329

MEDIUM 5.4EPSS 0.3%

HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.

CVSS v3.1 CNA
5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.26% chance of exploitation in the next 30 days, 17th percentile
Published
2025-01-23
Updated
2025-01-24

Proof-of-concept exploits (1)

References

Related