CVE-2024-34006

The site log report required additional encoding of event descriptions to ensure any HTML in the content is displayed in plaintext instead of being rendered.

Scoring

CVSS base score

0

EPSS probability

0.35%

CWE

CWE-838

Published

2024-05-31

Last modified

2026-03-13

Weakness type

• CWE-838

Related vulnerabilities

• CVE-2026-55859 — MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb
• CVE-2026-55858 — MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client
• CVE-2026-47079 — Round-trip Corruption via Improper Entity Escaping in xml_builder
• CVE-2026-53641 — FOSSBilling has stored XSS in client email views via unescaped content in JavaScript template literal

Markdown version · Browse all CVEs