CVE-2024-28126

Cross-site scripting vulnerability exists in 0ch BBS Script ver.4.00. An arbitrary script may be executed on the web browser of the user accessing the website that uses the product. Note that the developer was unreachable, therefore, users should consider stop using 0ch BBS Script ver.4.00.

• CWE-79

• https://jvn.jp/en/jp/JVN46874970/
• https://jvn.jp/en/jp/JVN46874970/

Published

Mar 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2812A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20…8.8
• CVE-2024-28120codeium-chrome is an open source code completion plugin for …7.5
• CVE-2024-28121stimulus_reflex is a system to extend the capabilities of bo…8.8
• CVE-2024-28122 JWX is Go module implementing various JWx (JWA/JWE/JWK/JWS/…6.8
• CVE-2024-28123Wasmi is an efficient and lightweight WebAssembly interprete…9.8
• CVE-2024-28125FitNesse all releases allows a remote authenticated attacker…9.8
• CVE-2024-28127Improper input validation in UEFI firmware for some Intel(R)…8.7
• CVE-2024-28128Cross-site scripting vulnerability exists in FitNesse releas…6.1
• CVE-2024-2813A vulnerability was found in Tenda AC15 15.03.20_multi. It h…9.8
• CVE-2024-28130An incorrect type conversion vulnerability exists in the DVP…7.5
• CVE-2024-28131EasyRange Ver 1.41 contains an issue with the executable fil…7.8
• CVE-2024-28132 Exposure of Sensitive Information vulnerability exists in t…4.4