References https://www.twcert.org.tw/newepaper/cp-151-7779-35562-3.html https://zeroday.hitcon.org/vulnerability/ZD-2024-00139 https://www.twcert.org.tw/tw/cp-132-7779-35562-1.html https://www.twcert.org.tw/en/cp-139-7780-0a713-2.html https://db.gcve.eu/search?vendor=Super+8 https://github.com/cisagov/vulnrichment/blob/develop/2024/4xxx/CVE-2024-4302.json
Related VulnerabilitiesPoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-41456: Bludit CMS <= 3.20.0 - Cross-Site ScriptingPoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site ScriptingPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site ScriptingPoCCVE-2022-39258: Mailcow Dockerized Swagger UI - Cross-Site ScriptingPoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site ScriptingHepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site ScriptingPoCCVE-2026-55087: Etherpad 2.1.0 <= 3.0.0 - Cross-Site ScriptingPoCcaseaware-xss: CaseAware a360inc - Cross-Site ScriptingPoCgestsup-xss: GestSup - Cross-Site ScriptingPoCodoo-xss: Odoo - Cross-Site ScriptingPoCsolarview-compact-pow-xss: SolarView Compact 6.00 - 'pow' Cross-Site Scripting