References https://www.twcert.org.tw/tw/cp-132-8219-f12d0-1.html https://www.twcert.org.tw/newepaper/cp-151-8219-f12d0-3.html https://cc.nchu.edu.tw/p/406-1000-1447,r14.php?Lang=zh-tw https://www.twcert.org.tw/en/cp-139-8220-e75c2-2.html https://cve.imfht.com/detail/CVE-2024-11021
Related VulnerabilitiesHepta Platforms｜Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-1115: parisneo/lollms < 2.2.0 - Authenticated Stored XSSPoCwp-livechat-stored-xss: WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSSPoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch APIPoCCVE-2024-3231: Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site ScriptingPoCCVE-2025-1232: Site Reviews < 7.2.5 - Unauthenticated Stored XSSPoCCVE-2024-37259: WP Extended < 3.0.0 - Stored Cross-Site ScriptingPoCCVE-2016-15041: MainWP Dashboard <= 3.1.2 - Stored Cross-Site ScriptingPoCCVE-2012-10018: WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File UploadPoCCVE-2021-24657: Limit Login Attempts WordPress - Stored Cross-site ScriptingPoCCVE-2021-24681: Duplicate Page WordPress - Stored Cross-Site ScriptingPoCCVE-2022-1029: Limit Login Attempts - Stored Cross-Site ScriptingPoCCVE-2022-38130: KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution