CVE-2024-56361

LGSL (Live Game Server List) provides online status for games. Before 7.0.0, a stored cross-site scripting (XSS) vulnerability was identified in lgsl. The function lgsl_query_40 in lgsl_protocol.php has implemented an HTTP crawler. This function makes a request to the registered game server, and upon crawling the malicious /info endpoint with our payload, will render our javascript on the info page. This information is being displayed via lgsl_details.php. This vulnerability is fixed in 7.0.0.

• CWE-79

• https://github.com/tltneon/lgsl/commit/3fbd3bb581b636f7fd3ea0592c5f8df87d3a2843
• https://github.com/tltneon/lgsl/security/advisories/GHSA-xx95-62h6-h7v3
• https://github.com/tltneon/lgsl/security/advisories/GHSA-xx95-62h6-h7v3

Published

Dec 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-56355In JetBrains TeamCity before 2024.12 missing Content-Type he…5.4
• CVE-2024-56356In JetBrains TeamCity before 2024.12 insecure XMLParser conf…7.1
• CVE-2024-56357grist-core is a spreadsheet hosting server. A user visiting …6.1
• CVE-2024-56358grist-core is a spreadsheet hosting server. A user visiting …6.1
• CVE-2024-56359grist-core is a spreadsheet hosting server. A user visiting …6.1
• CVE-2024-5636A vulnerability was found in itsourcecode Bakery Online Orde…9.8
• CVE-2024-56362Navidrome is an open source web-based music collection serve…5.5
• CVE-2024-56363APTRS (Automated Penetration Testing Reporting System) is a …7.8
• CVE-2024-56364SimpleXLSX is software for parsing and retrieving data from …5.4
• CVE-2024-56365PhpSpreadsheet is a PHP library for reading and writing spre…5.4
• CVE-2024-56366PhpSpreadsheet is a PHP library for reading and writing spre…5.4
• CVE-2024-56368In the Linux kernel, the following vulnerability has been re…5.5