[CRITICAL] Blind XSS Leading to Froxlor Application Compromise

PKSA-2bvk-dn1k-jgtg CVE-2024-34070 GHSA-x525-54hf-xr53

Affected version: <2.1.9

Reported by:
GitHub

[HIGH] Froxlor username/surname AND company field Bypass

PKSA-94d1-2fmr-db7c CVE-2023-50256 GHSA-625g-fm5w-w7w4

Affected version: <=2.1.1

Reported by:
GitHub

[CRITICAL] Froxlor Improper Input Validation vulnerability

PKSA-mhbb-j5t7-nknm CVE-2023-6069 GHSA-4jch-8qq5-hqg6

Affected version: <2.1.0-beta1

Reported by:
GitHub

[MEDIUM] Froxlor Session Fixation vulnerability

PKSA-t6cp-pc2s-dd4x CVE-2023-3192 GHSA-jr66-9ghf-6gp3

Affected version: <2.1.0

Reported by:
GitHub