CVE-2024-29273 Information

Description

There is Stored Cross-Site Scripting (XSS) in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php with the XSS payload in an SVG document.

Reference

https://github.com/zyx0814/dzzoffice/issues/244

Share on: