CVE-2024-30926 | jeffpiazza DerbyNet 9.0 /inc/kiosks.inc address_for_current_kiosk id/address cross site scripting

A vulnerability classified as problematic has been found in jeffpiazza DerbyNet 9.0. This affects the function address_for_current_kiosk of the file /inc/kiosks.inc. The manipulation of the argument id/address leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2024-30926. It is possible to initiate the attack remotely. There is no exploit available.