CVE-2024-38470

Name of the Vulnerable Software and Affected Versions iBarn version 1.5

Description A reflected cross-site scripting (XSS) issue was found, which can be triggered via the search parameter at the "/own.php" endpoint.

Recommendations For version 1.5, consider restricting access to the /own.php endpoint or avoiding the use of the search parameter until a fix is available. As a temporary workaround, input validation and sanitization of the search parameter can help minimize the risk of exploitation.