CVE-2024-3766

A vulnerability, which was classified as problematic, has been found in slowlyo OwlAdmin up to 3.5.7. Affected by this issue is some unknown functionality of the file /admin-api/upload_image of the component Image File Upload. The manipulation of the argument file leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-260606 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
• https://vuldb.com/?ctiid.260606
• https://vuldb.com/?id.260606
• https://vuldb.com/?submit.311886
• https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
• https://vuldb.com/?ctiid.260606
• https://vuldb.com/?id.260606
• https://vuldb.com/?submit.311886

Published

Apr 15, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37649Insecure Permissions vulnerability in SecureSTATION v.2.5.5.…4.6
• CVE-2024-3765A vulnerability classified as critical was found in Xiongmai…9.8
• CVE-2024-37654An issue in BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01…6.1
• CVE-2024-37656An open redirect vulnerability in gnuboard5 v.5.5.16 allows …6.1
• CVE-2024-37657An open redirect vulnerability in gnuboard5 v.5.5.16 allows …6.1
• CVE-2024-37658An open redirect vulnerability in gnuboard5 v.5.5.16 allows …6.1
• CVE-2024-37661TP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redi…6.3
• CVE-2024-37662TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijac…6.3
• CVE-2024-37663Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redir…4.1
• CVE-2024-37664Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijack…5.2
• CVE-2024-37665An access control issue in Wvp GB28181 Pro 2.0 allows authen…8.8
• CVE-2024-3767A vulnerability classified as critical was found in PHPGuruk…8.8