Oct. 18, 2023, 10:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload.

attackers bees browser controller cross-site cve javascript parameter payload php scripting the web vulnerability web web browser xss

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

IT Security Engineer

@ People Profilers | Singapore, Singapore, Singapore

Consultant - DFIR - EMEA (SA)

@ Control Risks | Johannesburg, Gauteng, South Africa

Consultant Sénior Cyber Sécurité H/F

@ Hifield | Lyon, France