CVE-2024-29278

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

funboot v1.1 is vulnerable to Cross Site Scripting (XSS) via the title field in "create a message ."

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Mar 30, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-29287.5A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3CVE-2024-29297.8A memory corruption vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user to insert unauthCVE-2024-29291An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log. NOTE:CVE-2024-292929.1Multiple OS Command Injection vulnerabilities affecting Kasda LinkSmart Router KW6512 <= v1.3 enable an authenticated remote attacker to exeCVE-2024-292965.3A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference CVE-2024-29309.8A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. Affected by this vulnerability is an uCVE-2024-293017.5SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin_id=CVE-2024-293027.5SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php.CVE-2024-293039.8The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL InjectionCVE-2024-293097.7An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary code via the Transfer Service.CVE-2024-29314.3The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.CVE-2024-293166.3NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group v
CVE-2024-29278: Medium severity, CVSS 6.5 | Vulnix