Security Advisory

CVE-2024-37428

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-07-22 08:27:49
Last updated 2026-04-28 16:09:58
Assigner Patchstack
CVSS score 6.5
State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.5.0.