VULNERABILITY INTELLIGENCE

CVE-2024-29878

CVSS score7.1 HIGH

EPSS probability0.49%

CISA KEVNot currently listed

Published2024-03-21

Last modified2026-06-17

Description

Cross-Site Scripting (XSS) vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/sitepreference/add, 'description' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.