CVE Database
/

CVE-2024-27278

Back to search

CVE-2024-27278

Published: Mar 5, 2024

Modified: Mar 27, 2025

PUBLISHED

Description

OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitrary script may be executed on the web browsers of other users.

VendorProductVersions

OpenPNE Project

OpenPNE Plugin "opTimelinePlugin"

affected
1.2.11 and earlier

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now