Description
Cross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a remote attacker to obtain sensitive information via the email parameter found in /Gibbon/modules/User Admin/user_manage_editProcess.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin N5 Upload Form Arbitrary File Upload (1.0)
WordPress Plugin Category List Portfolio Page TimThumb Arbitrary File Upload (1.2.3)
Grafana Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2026-21727)
Next.js Deserialization of Untrusted Data Vulnerability (CVE-2025-55184)
Craft CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-14280)