CVE-2024-54001

Kanboard is project management software that focuses on the Kanban methodology. HTML can be injected and stored into the application settings section. The fields application_language, application_date_format,application_timezone and application_time_format allow arbirary user input which is reflected. The vulnerability can become xss if the user input is javascript code that bypass CSP. This vulnerability is fixed in 1.2.41.

• CWE-80
• CWE-79

• https://github.com/kanboard/kanboard/security/advisories/GHSA-4vvp-jf72-chrjExploit, Vendor Advisory

Published

Dec 5, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53994Discourse is an open source platform for community discussio…4.3
• CVE-2024-53995SickChill is an automatic video library manager for TV shows…1.9
• CVE-2024-53996Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-53999Mobile Security Framework (MobSF) is a pen-testing, malware …5.4
• CVE-2024-5400Openfind Mail2000 does not properly filter parameters of spe…8.8
• CVE-2024-54000Mobile Security Framework (MobSF) is a pen-testing, malware …7.5
• CVE-2024-54002Dependency-Track is a Component Analysis platform that allow…5.3
• CVE-2024-54003Jenkins Simple Queue Plugin 1.4.4 and earlier does not escap…8
• CVE-2024-54004Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier …4.3
• CVE-2024-54005A vulnerability has been identified in COMOS V10.3 (All vers…5.9
• CVE-2024-54006Multiple command injection vulnerabilities exist in the web …7.2
• CVE-2024-54007Multiple command injection vulnerabilities exist in the web …7.2