cvedb.io
CVE-2024-9198
HIGH · CVSS 7.6
EPSS exploitation probability: 0%
Published 2024-09-26T10:15:05.040 · Last modified 2026-06-17T08:24:07.440

Summary

Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross-Site Scripting (stored XSS ) by uploading a malicious .svg image in the section: Profile > Profile picture.

Affected products

clibomanager — clibo_manager

Does this affect you?

Add your gear to cvedb and we'll alert you only when clibomanager ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.