CVE-2024-22411 | avo up to 2.x on Ruby Notifications Avo::BaseAction cross site scripting (GHSA-g8vp-2v5p-9qfh)

A vulnerability was found in avo up to 2.x on Ruby. It has been classified as problematic. Affected is the function Avo::BaseAction of the component Notifications Handler. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2024-22411. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.