CVE-2024-44793

Name of the Vulnerable Software and Affected Versions Gazelle (affected versions not specified)

Description A cross-site scripting (XSS) vulnerability in the component "/managers/multiple freeleech.php" of Gazelle allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the torrents parameter.

Recommendations As a temporary workaround, consider restricting access to the "/managers/multiple freeleech.php" component until a patch is available. Avoid using the torrents parameter in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.