cleantalk
Vulnerabilities and Security Researches

NMR Strava activities, CVE-2024-51603

CVE, Research URL

CVE-2024-51603

Application

NMR Strava activities

Published on
Nov 09, 2024
Research Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mircea N. NMR Strava activities allows DOM-Based XSS.This issue affects NMR Strava activities: from n/a through 1.0.6.
Affected versions
max 1.0.6.
Status
vulnerable